DataFlex

SSL Client Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server using a client-side certificate, send a simple message, receive a simple response, and disconnect. DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoSocket
    Variant vCert
Store    Handle hoCertStore
    Variant vJsonCN
    Handle hoJsonCN
    Variant vCert
    Handle hoCert
    Boolean iSsl
    Integer iMaxWaitMillisec
    String sSslServerHost
    Integer iSslServerPort
    String sReceivedMsg
    String sTemp1
    Boolean bTemp1

    Move False To iSuccess

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatSocket)) To hoSocket
    If (Not(IsComObjectCreated(hoSocket))) Begin
        Send CreateComObject of hoSocket
    End

    // Create an instance of a certificate store object, load a PFX file,
    // locate the certificate we need, and use it for signing.
    // (a PFX file may contain more than one certificate.)
    Get Create (RefClass(cComChilkatCertStore)) To hoCertStore
    If (Not(IsComObjectCreated(hoCertStore))) Begin
        Send CreateComObject of hoCertStore
    End
    // The 1st argument is the filename, the 2nd arg is the 
    // PFX file's password:
    Get ComLoadPfxFile Of hoCertStore "chilkat_secret.pfx" "secret" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Find the certificate by the subject common name:
    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonCN
    If (Not(IsComObjectCreated(hoJsonCN))) Begin
        Send CreateComObject of hoJsonCN
    End
    Get ComUpdateString Of hoJsonCN "CN" "cert common name" To iSuccess

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get pvComObject of hoJsonCN to vJsonCN
    Get pvComObject of hoCert to vCert
    Get ComFindCert Of hoCertStore vJsonCN vCert To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get pvComObject of hoCert to vCert
    Get ComSetSslClientCert Of hoSocket vCert To iSuccess

    Move True To iSsl
    Move 20000 To iMaxWaitMillisec

    // The SSL server hostname may be an IP address, a domain name,
    // or "localhost".  You'll need to change this:

    Move "123.123.88.88" To sSslServerHost
    Move 8123 To iSslServerPort

    // Connect to the SSL server:
    Get ComConnect Of hoSocket sSslServerHost iSslServerPort iSsl iMaxWaitMillisec To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoSocket To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Set maximum timeouts for reading an writing (in millisec)
    Set ComMaxReadIdleMs Of hoSocket To 20000
    Set ComMaxSendIdleMs Of hoSocket To 20000

    // Send a "Hello Server! -EOM-" message:
    Get ComSendString Of hoSocket "Hello Server! -EOM-" To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoSocket To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // The server (in this example) is going to send a "Hello Client! -EOM-" 
    // message.  Read it:
    Get ComReceiveUntilMatch Of hoSocket "-EOM-" To sReceivedMsg
    Get ComLastMethodSuccess Of hoSocket To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoSocket To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Close the connection with the server
    // Wait a max of 20 seconds (20000 millsec)
    Get ComClose Of hoSocket 20000 To iSuccess

    Showln sReceivedMsg


End_Procedure