(Delphi ActiveX) Get the Server Certificate, Certificate Chain, and Root CA Certificate

Demonstrates how to get the HTTP server certificate, its certificate chain, and the root CA certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Integer;
http: TChilkatHttp;
sslCert: TChilkatCert;
certChain: TChilkatCertChain;
cert: TChilkatCert;
i: Integer;
numCerts: Integer;
caCert: TChilkatCert;

begin
success := 0;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := TChilkatHttp.Create(Self);

// We're getting the SSL/TLS certificate, so make sure to connect to the SSL/TLS port (443).
sslCert := TChilkatCert.Create(Self);
success := http.GetServerCert('apple.com',443,sslCert.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

certChain := TChilkatCertChain.Create(Self);
success := sslCert.BuildCertChain(certChain.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(sslCert.LastErrorText);
    Exit;
  end;

cert := TChilkatCert.Create(Self);
i := 0;
numCerts := certChain.NumCerts;
while i < numCerts do
  begin
    certChain.CertAt(i,cert.ControlInterface);
    Memo1.Lines.Add('SubjectDN ' + IntToStr(i) + ': ' + cert.SubjectDN);
    Memo1.Lines.Add('IssuerDN ' + IntToStr(i) + ': ' + cert.IssuerDN);
    i := i + 1;
  end;

// If the certificate chain reaches the root CA cert, then the last cert in the chain
// is the root CA cert.
if (certChain.ReachesRoot = 1) then
  begin
    caCert := TChilkatCert.Create(Self);
    certChain.CertAt(numCerts - 1,caCert.ControlInterface);
    Memo1.Lines.Add('CA Root Cert: ' + caCert.SubjectDN);
  end;
end;