Get a Received Client Certificate (Server Side)

See more Socket/SSL/TLS Examples

Demonstrates Socket.GetRcvdClientCert, which copies a client certificate presented during the TLS handshake of an accepted server-side connection into a Cert object.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

<?php

include("chilkat.php");

$success = false;

$socket = new CkSocket();

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  The PFX password should come from a secure source rather than being hard-coded.
$pfxPassword = 'myPfxPassword';
$cert = new CkCert();
$success = $cert->LoadPfxFile('qa_data/server.pfx',$pfxPassword);
if ($success == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

$success = $socket->InitSslServer($cert);
if ($success == false) {
    print $socket->lastErrorText() . "\n";
    exit;
}

$success = $socket->BindAndListen(5000,25);
if ($success == false) {
    print $socket->lastErrorText() . "\n";
    exit;
}

//  Accept a client connection.  The accepted connection carries any client certificate presented
//  during the TLS handshake.
$connectedSock = new CkSocket();
$success = $socket->AcceptNext(20000,$connectedSock);
if ($success == false) {
    print $socket->lastErrorText() . "\n";
    exit;
}

//  Copy each received client certificate and inspect it.
$numClientCerts = $connectedSock->get_NumReceivedClientCerts();
$clientCert = new CkCert();

for ($i = 0; $i <= $numClientCerts - 1; $i++) {
    $success = $connectedSock->GetRcvdClientCert($i,$clientCert);
    if ($success == false) {
        print $connectedSock->lastErrorText() . "\n";
        exit;
    }

    print 'Client certificate subject: ' . $clientCert->subjectCN() . "\n";
}


?>