Set a TLS Client Certificate from a PEM

See more Socket/SSL/TLS Examples

Demonstrates Socket.SetSslClientCertPem, which loads and configures a TLS client certificate and private key from PEM data or a PEM file.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    DECLARE @socket int
    EXEC @hr = sp_OACreate 'Chilkat.Socket', @socket OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    --  The file path is relative to the application's current working directory.  An absolute path
    --  may also be used.  Supply the path appropriate to your own environment.
    --  The PEM password should come from a secure source rather than being hard-coded.
    DECLARE @pemPassword nvarchar(4000)
    SELECT @pemPassword = 'myPemPassword'

    --  Load and configure the TLS client certificate and private key from a PEM file.  Configure the
    --  client certificate before connecting.
    EXEC sp_OAMethod @socket, 'SetSslClientCertPem', @success OUT, 'qa_data/client.pem', @pemPassword
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @socket, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @socket
        RETURN
      END

    DECLARE @bTls int
    SELECT @bTls = 1
    DECLARE @maxWaitMs int
    SELECT @maxWaitMs = 5000
    EXEC sp_OAMethod @socket, 'Connect', @success OUT, 'example.com', 5000, @bTls, @maxWaitMs
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @socket, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @socket
        RETURN
      END

    PRINT 'Connected with mutual TLS.'

    EXEC @hr = sp_OADestroy @socket


END
GO