Go

Use HTTPS Client Certificate from .cer and .key Files

See more HTTP Examples

Demonstrates how to load a cert + private key from .cer and .key (base64) files and use it for mutual TLS authentication (client-side certificate). Go

    success := false

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    http := chilkat.NewHttp()

    cert := chilkat.NewCert()
    privKey := chilkat.NewPrivateKey()

    // Load any type of certificate (.cer, .p7b, .pem, etc.) by calling LoadFromFile.
    success = cert.LoadFromFile("qa_data/certs/sample_cert_a.cer")
    if success != true {
        fmt.Println(cert.LastErrorText())
        http.DisposeHttp()
        cert.DisposeCert()
        privKey.DisposePrivateKey()
        return
    }

    // Load the private key.
    bd := chilkat.NewBinData()
    success = bd.LoadFile("qa_data/certs/sample_key_a.key")
    success = privKey.LoadAnyFormat(bd,"privateKeyPasswordIfNecessary")
    if success != true {
        fmt.Println(privKey.LastErrorText())
        http.DisposeHttp()
        cert.DisposeCert()
        privKey.DisposePrivateKey()
        bd.DisposeBinData()
        return
    }

    // Associate the private key with the cert.
    success = cert.SetPrivateKey(privKey)
    if success != true {
        fmt.Println(cert.LastErrorText())
        http.DisposeHttp()
        cert.DisposeCert()
        privKey.DisposePrivateKey()
        bd.DisposeBinData()
        return
    }

    // Set the certificate to be used for mutual TLS authentication
    // (i.e. sets the client-side certificate for two-way TLS authentication)
    success = http.SetSslClientCert(cert)
    if success != true {
        fmt.Println(http.LastErrorText())
        http.DisposeHttp()
        cert.DisposeCert()
        privKey.DisposePrivateKey()
        bd.DisposeBinData()
        return
    }

    // At this point, the HTTP object instance is setup with the client-side cert, and any SSL/TLS
    // connection will automatically use it if the server demands a client-side cert.

    http.DisposeHttp()
    cert.DisposeCert()
    privKey.DisposePrivateKey()
    bd.DisposeBinData()