(Objective-C) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoHttp.h>
#import <CkoCert.h>
#import <CkoCertChain.h>

BOOL success = NO;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoHttp *http = [[CkoHttp alloc] init];

// We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).
CkoCert *sslCert = [[CkoCert alloc] init];
success = [http GetServerCert: @"apple.com" port: [NSNumber numberWithInt: 443] cert: sslCert];
if (success == NO) {
    NSLog(@"%@",http.LastErrorText);
    return;
}

CkoCertChain *certChain = [[CkoCertChain alloc] init];
success = [sslCert BuildCertChain: certChain];
if (success == NO) {
    NSLog(@"%@",sslCert.LastErrorText);
    return;
}

CkoCert *cert = [[CkoCert alloc] init];
int i = 0;
int numCerts = [certChain.NumCerts intValue];
while (i < numCerts) {
    [certChain CertAt: [NSNumber numberWithInt: i] cert: cert];
    NSLog(@"%@%d%@%@",@"SubjectDN ",i,@": ",cert.SubjectDN);
    NSLog(@"%@%d%@%@",@"IssuerDN ",i,@": ",cert.IssuerDN);
    i = i + 1;
}

// If the certificate chain reaches the root CA cert, then the last cert in the chain
// is the root CA cert.
if (certChain.ReachesRoot == YES) {
    CkoCert *caCert = [[CkoCert alloc] init];
    [certChain CertAt: [NSNumber numberWithInt: (numCerts - 1)] cert: caCert];
    NSLog(@"%@%@",@"CA Root Cert: ",caCert.SubjectDN);
}