Set a TLS Client Certificate from a Cert Object

See more Socket/SSL/TLS Examples

Demonstrates Socket.SetSslClientCert, which configures a certificate as the client certificate for subsequent TLS connections. The certificate must have access to its private key.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

IncludeFile "CkSocket.pb"
IncludeFile "CkCert.pb"

Procedure ChilkatExample()

    success.i = 0

    socket.i = CkSocket::ckCreate()
    If socket.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  The file path is relative to the application's current working directory.  An absolute path
    ;  may also be used.  Supply the path appropriate to your own environment.
    ;  The PFX password should come from a secure source rather than being hard-coded.
    pfxPassword.s = "myPfxPassword"
    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadPfxFile(cert,"qa_data/client.pfx",pfxPassword)
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    ;  Configure the client certificate before connecting.  Use this only when the server requests or
    ;  requires client-certificate authentication (mutual TLS).
    success = CkSocket::ckSetSslClientCert(socket,cert)
    If success = 0
        Debug CkSocket::ckLastErrorText(socket)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    bTls.i = 1
    maxWaitMs.i = 5000
    success = CkSocket::ckConnect(socket,"example.com",5000,bTls,maxWaitMs)
    If success = 0
        Debug CkSocket::ckLastErrorText(socket)
        CkSocket::ckDispose(socket)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    Debug "Connected with mutual TLS."


    CkSocket::ckDispose(socket)
    CkCert::ckDispose(cert)


    ProcedureReturn
EndProcedure