Delphi DLL

SSL Server Example

See more Socket/SSL/TLS Examples

Demonstrates how to create an SSL socket for accepting connections. This example is *very* simple in that it will create an SSL socket for accepting a single connection. It will read a message from the client, send a reply, and exit. Delphi DLL

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, JsonObject, Cert, CertStore, Socket;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Boolean;
listenSslSocket: HCkSocket;
certStore: HCkCertStore;
jsonCN: HCkJsonObject;
cert: HCkCert;
myPort: Integer;
backLog: Integer;
maxWaitMillisec: Integer;
clientSock: HCkSocket;
receivedMsg: PWideChar;

begin
success := False;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

listenSslSocket := CkSocket_Create();

// An SSL server needs a digital certificate.  This example loads it from a PFX file.

// Create an instance of a certificate store object, load a PFX file,
// locate the certificate we need, and use it.
// (a PFX file may contain more than one certificate.)
certStore := CkCertStore_Create();
// The 1st argument is the filename, the 2nd arg is the 
// PFX file's password:
success := CkCertStore_LoadPfxFile(certStore,'chilkat.pfx','test');
if (success = False) then
  begin
    Memo1.Lines.Add(CkCertStore__lastErrorText(certStore));
    Exit;
  end;

// Find the certificate to be used for SSL:
jsonCN := CkJsonObject_Create();
CkJsonObject_UpdateString(jsonCN,'CN','example.com');

cert := CkCert_Create();
success := CkCertStore_FindCert(certStore,jsonCN,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCertStore__lastErrorText(certStore));
    Exit;
  end;

// Use the certificate:
success := CkSocket_InitSslServer(listenSslSocket,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(listenSslSocket));
    Exit;
  end;

// Bind and listen on a port:
myPort := 8123;
// Allow for a max of 5 queued connect requests.
backLog := 5;
success := CkSocket_BindAndListen(listenSslSocket,myPort,backLog);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(listenSslSocket));
    Exit;
  end;

// If accepting an SSL/TLS connection, the SSL handshake is part of the connection
// establishment process. This involves a few back-and-forth messages between the 
// client and server to establish algorithms and a shared key to create the secure 
// channel. The sending and receiving of these messages are governed by the 
// MaxReadIdleMs and MaxSendIdleMs properties. If these properties are set to 0 
// (and this is the default unless changed by your application), then the 
// AcceptNext can hang indefinitely during the SSL handshake process. 
// Make sure these properties are set to appropriate values before calling AcceptNext.

// Set a 10 second max for waiting to read/write.  This is for the SSL/TLS handshake establishment.
CkSocket_putMaxReadIdleMs(listenSslSocket,10000);
CkSocket_putMaxSendIdleMs(listenSslSocket,10000);

// Accept a single client connection and establish the secure SSL/TLS channel:
maxWaitMillisec := 20000;
clientSock := CkSocket_Create();
success := CkSocket_AcceptNext(listenSslSocket,maxWaitMillisec,clientSock);
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(listenSslSocket));
    Exit;
  end;

// The client (in this example) is going to send a "Hello Server! -EOM-" 
// message.  Read it:
receivedMsg := CkSocket__receiveUntilMatch(clientSock,'-EOM-');
if (CkSocket_getLastMethodSuccess(clientSock) = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(clientSock));
    Exit;
  end;

Memo1.Lines.Add(receivedMsg);

// Send a "Hello Client! -EOM-" message:
success := CkSocket_SendString(clientSock,'Hello Client! -EOM-');
if (success = False) then
  begin
    Memo1.Lines.Add(CkSocket__lastErrorText(clientSock));
    Exit;
  end;

// Close the connection with the client
// Wait a max of 20 seconds (20000 millsec)
success := CkSocket_Close(clientSock,20000);

CkSocket_Dispose(listenSslSocket);
CkCertStore_Dispose(certStore);
CkJsonObject_Dispose(jsonCN);
CkCert_Dispose(cert);
CkSocket_Dispose(clientSock);

end;