Get a Received Client Certificate (Server Side)

See more Socket/SSL/TLS Examples

Demonstrates Socket.GetRcvdClientCert, which copies a client certificate presented during the TLS handshake of an accepted server-side connection into a Cert object.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

load ./chilkat.dll

set success 0

set socket [new_CkSocket]

#  The file path is relative to the application's current working directory.  An absolute path
#  may also be used.  Supply the path appropriate to your own environment.
#  The PFX password should come from a secure source rather than being hard-coded.
set pfxPassword "myPfxPassword"
set cert [new_CkCert]

set success [CkCert_LoadPfxFile $cert "qa_data/server.pfx" $pfxPassword]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkSocket $socket
    delete_CkCert $cert
    exit
}

set success [CkSocket_InitSslServer $socket $cert]
if {$success == 0} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCert $cert
    exit
}

set success [CkSocket_BindAndListen $socket 5000 25]
if {$success == 0} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCert $cert
    exit
}

#  Accept a client connection.  The accepted connection carries any client certificate presented
#  during the TLS handshake.
set connectedSock [new_CkSocket]

set success [CkSocket_AcceptNext $socket 20000 $connectedSock]
if {$success == 0} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCert $cert
    delete_CkSocket $connectedSock
    exit
}

#  Copy each received client certificate and inspect it.
set numClientCerts [CkSocket_get_NumReceivedClientCerts $connectedSock]
set clientCert [new_CkCert]

for {set i 0} {$i <= [expr $numClientCerts - 1]} {incr i} {
    set success [CkSocket_GetRcvdClientCert $connectedSock $i $clientCert]
    if {$success == 0} then {
        puts [CkSocket_lastErrorText $connectedSock]
        delete_CkSocket $socket
        delete_CkCert $cert
        delete_CkSocket $connectedSock
        delete_CkCert $clientCert
        exit
    }

    puts "Client certificate subject: [CkCert_subjectCN $clientCert]"
}

delete_CkSocket $socket
delete_CkCert $cert
delete_CkSocket $connectedSock
delete_CkCert $clientCert