Lua

Socket TLS Mutual Authentication (Client-Side Certificate)

See more Socket/SSL/TLS Examples

This example demonstrates how to provide a client-side certificate, also known as "two-way authentication" or "mutual authentication" for servers that require a client certificate. Lua

local chilkat = require("chilkat")

-- This example assumes the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local sock = chilkat.Socket.new()

-- Set the certificate to be used for mutual TLS authentication
-- (i.e. sets the client-side certificate for two-way TLS authentication)
local success = sock:set_ssl_client_cert_pfx("/home/bob/pfxFiles/myClientSideCertWithPrivateKey.pfx", "pfxPassword")
if not success then
    print(sock.last_error_text)
    return
end

-- Note: The certificate used for the client-side of TLS mutual authentication
-- must have the associated private key available. (.pfx/.p12 files typically store both
-- the certificate and associated private key.)

-- Establish the connection using the socket object (with client certificate authentication).
local bTls = true
local port = 443
local maxWaitMs = 5000
success = sock:connect("www.example.com", port, bTls, maxWaitMs)
if not success then
    print("Connect Failure Error Code: " .. sock.connect_fail_reason)
    print(sock.last_error_text)
    return
end

-- At this point, the Socket object is connected and authenticated using the client-side cert

-- ...
-- ...