(Node.js) Socket TLS Mutual Authentication (Client-Side Certificate)

This example demonstrates how to provide a client-side certificate, also known as "two-way authentication" or "mutual authentication" for servers that require a client certificate.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var sock = new chilkat.Socket();

    // Set the certificate to be used for mutual TLS authentication
    // (i.e. sets the client-side certificate for two-way TLS authentication)
    var success = sock.SetSslClientCertPfx("/home/bob/pfxFiles/myClientSideCertWithPrivateKey.pfx","pfxPassword");
    if (success !== true) {
        console.log(sock.LastErrorText);
        return;
    }

    // Note: The certificate used for the client-side of TLS mutual authentication
    // must have the associated private key available. (.pfx/.p12 files typically store both
    // the certificate and associated private key.)

    // Establish the connection using the socket object (with client certificate authentication).
    var bTls = true;
    var port = 443;
    var maxWaitMs = 5000;
    success = sock.Connect("www.example.com",port,bTls,maxWaitMs);
    if (success !== true) {
        console.log("Connect Failure Error Code: " + sock.ConnectFailReason);
        console.log(sock.LastErrorText);
        return;
    }

    // At this point, the Socket object is connected and authenticated using the client-side cert

    // ...
    // ..

}

chilkatExample();