SQL Server

Verify SSL Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server and verify its SSL certificate. SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @socket int
    EXEC @hr = sp_OACreate 'Chilkat.Socket', @socket OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @ssl int
    SELECT @ssl = 1
    DECLARE @maxWaitMillisec int
    SELECT @maxWaitMillisec = 20000

    -- The SSL server hostname may be an IP address, a domain name,
    -- or "localhost". 
    DECLARE @sslServerHost nvarchar(4000)

    SELECT @sslServerHost = 'www.paypal.com'
    DECLARE @sslServerPort int
    SELECT @sslServerPort = 443

    -- Connect to the SSL server:
    EXEC sp_OAMethod @socket, 'Connect', @success OUT, @sslServerHost, @sslServerPort, @ssl, @maxWaitMillisec
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @socket, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @socket
        RETURN
      END

    DECLARE @cert int
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT

    DECLARE @bExpired int

    DECLARE @bRevoked int

    DECLARE @bSignatureVerified int

    DECLARE @bTrustedRoot int

    EXEC sp_OAMethod @socket, 'GetServerCert', @success OUT, @cert
    IF @success <> 0
      BEGIN


        PRINT 'Server Certificate:'

        EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
        PRINT 'Distinguished Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
        PRINT 'Common Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'IssuerDN', @sTmp0 OUT
        PRINT 'Issuer Distinguished Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'IssuerCN', @sTmp0 OUT
        PRINT 'Issuer Common Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'Expired', @bExpired OUT
        EXEC sp_OAGetProperty @cert, 'Revoked', @bRevoked OUT
        EXEC sp_OAGetProperty @cert, 'SignatureVerified', @bSignatureVerified OUT
        EXEC sp_OAGetProperty @cert, 'TrustedRoot', @bTrustedRoot OUT


        PRINT 'Expired: ' + @bExpired

        PRINT 'Revoked: ' + @bRevoked

        PRINT 'Signature Verified: ' + @bSignatureVerified

        PRINT 'Trusted Root: ' + @bTrustedRoot

      END

    -- Close the connection with the server
    -- Wait a max of 20 seconds (20000 millsec)
    EXEC sp_OAMethod @socket, 'Close', @success OUT, 20000

    EXEC @hr = sp_OADestroy @socket
    EXEC @hr = sp_OADestroy @cert


END
GO