Pascal (Lazarus/Delphi)

SSL Client Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server using a client-side certificate, send a simple message, receive a simple response, and disconnect. Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.JsonObject,
  Chilkat.Cert,
  Chilkat.CertStore,
  Chilkat.Socket;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  socket: TSocket;
  certStore: TCertStore;
  jsonCN: TJsonObject;
  cert: TCert;
  ssl: Boolean;
  maxWaitMillisec: Integer;
  sslServerHost: string;
  sslServerPort: Integer;
  receivedMsg: string;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  socket := TSocket.Create;

  //  Create an instance of a certificate store object, load a PFX file,
  //  locate the certificate we need, and use it for signing.
  //  (a PFX file may contain more than one certificate.)
  certStore := TCertStore.Create;
  //  The 1st argument is the filename, the 2nd arg is the 
  //  PFX file's password:
  success := certStore.LoadPfxFile('chilkat_secret.pfx','secret');
  if (success <> True) then
    begin
      WriteLn(certStore.LastErrorText);
      Exit;
    end;

  //  Find the certificate by the subject common name:
  jsonCN := TJsonObject.Create;
  jsonCN.UpdateString('CN','cert common name');

  cert := TCert.Create;
  success := certStore.FindCert(jsonCN,cert);
  if (success = False) then
    begin
      WriteLn(certStore.LastErrorText);
      Exit;
    end;

  success := socket.SetSslClientCert(cert);

  ssl := True;
  maxWaitMillisec := 20000;

  //  The SSL server hostname may be an IP address, a domain name,
  //  or "localhost".  You'll need to change this:

  sslServerHost := '123.123.88.88';
  sslServerPort := 8123;

  //  Connect to the SSL server:
  success := socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec);
  if (success <> True) then
    begin
      WriteLn(socket.LastErrorText);
      Exit;
    end;

  //  Set maximum timeouts for reading an writing (in millisec)
  socket.MaxReadIdleMs := 20000;
  socket.MaxSendIdleMs := 20000;

  //  Send a "Hello Server! -EOM-" message:
  success := socket.SendString('Hello Server! -EOM-');
  if (success <> True) then
    begin
      WriteLn(socket.LastErrorText);
      Exit;
    end;

  //  The server (in this example) is going to send a "Hello Client! -EOM-" 
  //  message.  Read it:
  receivedMsg := socket.ReceiveUntilMatch('-EOM-');
  if (socket.LastMethodSuccess <> True) then
    begin
      WriteLn(socket.LastErrorText);
      Exit;
    end;

  //  Close the connection with the server
  //  Wait a max of 20 seconds (20000 millsec)
  success := socket.Close(20000);

  WriteLn(receivedMsg);


  socket.Free;
  certStore.Free;
  jsonCN.Free;
  cert.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.