Lua Requires Chilkat v11.0.0+

Examine SSL/TLS Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how an application can examine and check a server's SSL/TLS certificate. Lua

local chilkat = require("chilkat")

-- This example assumes the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local socket = chilkat.Socket.new()

-- Connect to a server.
local useTls = true
local maxWaitMs = 2000
local success = socket:connect("www.intel.com", 443, useTls, maxWaitMs)
if not success then
    print(socket.last_error_text)
    return
end

-- If we get here, the TLS connection ws made..
-- In any SSL/TLS handshake, the server sends its certificate in a TLS handshake message.
-- Chilkat will keep it cached within the object that made the connection.
-- Get the server's cert and examine a few things.
local cert = chilkat.Cert.new()
socket:get_server_cert(cert)

print("Distinguished Name: " .. cert.subject_dn)
print("Common Name: " .. cert.subject_cn)
print("Issuer Distinguished Name: " .. cert.issuer_dn)
print("Issuer Common Name: " .. cert.issuer_cn)

print("Expired: " .. tostring(cert.expired))
print("Revoked: " .. tostring(cert.revoked))
print("Signature Verified: " .. tostring(cert.signature_verified))
print("Trusted Root: " .. tostring(cert.trusted_root))

-- Sample output:

-- Distinguished Name: C=US, ST=California, O=Intel Corporation, CN=*.intel.com
-- Common Name: *.intel.com
-- Issuer Distinguished Name: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
-- Issuer Common Name: Sectigo RSA Organization Validation Secure Server CA
-- Expired: False
-- Revoked: False
-- Signature Verified: True
-- Trusted Root: True