VBScript

Enumerate Server-Advertised Acceptable Client CAs

Demonstrates Socket.GetSslAcceptableClientCaDn, which returns a certificate-authority distinguished name advertised by a TLS server when it requests a client certificate.

Background. Valid indexes range from 0 through NumSslAcceptableClientCAs minus one. A client can use these names to select an appropriate client certificate.

Chilkat VBScript Downloads

Download Chilkat for VBScript

VBScript

Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)

success = 0

set socket = CreateObject("Chilkat.Socket")

'  Connect to the server using TLS.
bTls = 1
maxWaitMs = 5000
success = socket.Connect("example.com",5000,bTls,maxWaitMs)
If (success = 0) Then
    outFile.WriteLine(socket.LastErrorText)
    WScript.Quit
End If

'  After connecting to a server that requests a client certificate, enumerate the certificate-
'  authority distinguished names the server advertised as acceptable.
numCAs = socket.NumSslAcceptableClientCAs

For i = 0 To numCAs - 1
    caDn = socket.GetSslAcceptableClientCaDn(i)
    If (socket.LastMethodSuccess = 0) Then
        outFile.WriteLine(socket.LastErrorText)
        WScript.Quit
    End If

    outFile.WriteLine(caDn)
Next

outFile.Close