Configure a Socket for Server-Side TLS

See more Socket/SSL/TLS Examples

Demonstrates Socket.InitSslServer, which configures the object for server-side TLS using a server certificate that has access to its private key, then listens for and accepts a TLS connection.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

#import <CkoSocket.h>
#import <NSString.h>
#import <CkoCert.h>

BOOL success = NO;

CkoSocket *socket = [[CkoSocket alloc] init];

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
NSString *pfxPassword = @"myPfxPassword";
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadPfxFile: @"qa_data/server.pfx" password: pfxPassword];
if (success == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

//  Configure this object for server-side TLS using the certificate.  The certificate must have
//  access to its corresponding private key.
success = [socket InitSslServer: cert];
if (success == NO) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

//  Listen for connections.  Accepted connections will use TLS.
success = [socket BindAndListen: [NSNumber numberWithInt: 5000] backlog: [NSNumber numberWithInt: 25]];
if (success == NO) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

CkoSocket *connectedSock = [[CkoSocket alloc] init];
success = [socket AcceptNext: [NSNumber numberWithInt: 20000] socket: connectedSock];
if (success == NO) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

NSLog(@"%@",@"Accepted a TLS client connection.");