Unicode C

Enumerate Server-Advertised Acceptable Client CAs

Demonstrates Socket.GetSslAcceptableClientCaDn, which returns a certificate-authority distinguished name advertised by a TLS server when it requests a client certificate.

Background. Valid indexes range from 0 through NumSslAcceptableClientCAs minus one. A client can use these names to select an appropriate client certificate.

Chilkat Unicode C Downloads

Download Chilkat for Unicode C

Unicode C

#include <C_CkSocketW.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkSocketW socket;
    BOOL bTls;
    int maxWaitMs;
    int numCAs;
    int i;
    const wchar_t *caDn;

    success = FALSE;

    socket = CkSocketW_Create();

    //  Connect to the server using TLS.
    bTls = TRUE;
    maxWaitMs = 5000;
    success = CkSocketW_Connect(socket,L"example.com",5000,bTls,maxWaitMs);
    if (success == FALSE) {
        wprintf(L"%s\n",CkSocketW_lastErrorText(socket));
        CkSocketW_Dispose(socket);
        return;
    }

    //  After connecting to a server that requests a client certificate, enumerate the certificate-
    //  authority distinguished names the server advertised as acceptable.
    numCAs = CkSocketW_getNumSslAcceptableClientCAs(socket);

    for (i = 0; i <= numCAs - 1; i++) {
        caDn = CkSocketW_getSslAcceptableClientCaDn(socket,i);
        if (CkSocketW_getLastMethodSuccess(socket) == FALSE) {
            wprintf(L"%s\n",CkSocketW_lastErrorText(socket));
            CkSocketW_Dispose(socket);
            return;
        }

        wprintf(L"%s\n",caDn);
    }



    CkSocketW_Dispose(socket);

    }