Configure a Socket for Server-Side TLS

See more Socket/SSL/TLS Examples

Demonstrates Socket.InitSslServer, which configures the object for server-side TLS using a server certificate that has access to its private key, then listens for and accepts a TLS connection.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

IncludeFile "CkSocket.pb"
IncludeFile "CkCert.pb"

Procedure ChilkatExample()

    success.i = 0

    socket.i = CkSocket::ckCreate()
    If socket.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  The file path is relative to the application's current working directory.  An absolute path
    ;  may also be used.  Supply the path appropriate to your own environment.
    ;  The PFX password should come from a secure source rather than being hard-coded.
    pfxPassword.s = "myPfxPassword"
    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadPfxFile(cert,"qa_data/server.pfx",pfxPassword)
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    ;  Configure this object for server-side TLS using the certificate.  The certificate must have
    ;  access to its corresponding private key.
    success = CkSocket::ckInitSslServer(socket,cert)
    If success = 0
        Debug CkSocket::ckLastErrorText(socket)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    ;  Listen for connections.  Accepted connections will use TLS.
    success = CkSocket::ckBindAndListen(socket,5000,25)
    If success = 0
        Debug CkSocket::ckLastErrorText(socket)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    connectedSock.i = CkSocket::ckCreate()
    If connectedSock.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkSocket::ckAcceptNext(socket,20000,connectedSock)
    If success = 0
        Debug CkSocket::ckLastErrorText(socket)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        CkSocket::ckDispose(connectedSock)
        ProcedureReturn
    EndIf

    Debug "Accepted a TLS client connection."


    CkSocket::ckDispose(socket)
    CkCert::ckDispose(cert)
    CkSocket::ckDispose(connectedSock)


    ProcedureReturn
EndProcedure