Objective-C

SSL Client Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server using a client-side certificate, send a simple message, receive a simple response, and disconnect. Objective-C

#import <CkoSocket.h>
#import <CkoCertStore.h>
#import <CkoJsonObject.h>
#import <CkoCert.h>
#import <NSString.h>

BOOL success = NO;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoSocket *socket = [[CkoSocket alloc] init];

// Create an instance of a certificate store object, load a PFX file,
// locate the certificate we need, and use it for signing.
// (a PFX file may contain more than one certificate.)
CkoCertStore *certStore = [[CkoCertStore alloc] init];
// The 1st argument is the filename, the 2nd arg is the 
// PFX file's password:
success = [certStore LoadPfxFile: @"chilkat_secret.pfx" password: @"secret"];
if (success != YES) {
    NSLog(@"%@",certStore.LastErrorText);
    return;
}

// Find the certificate by the subject common name:
CkoJsonObject *jsonCN = [[CkoJsonObject alloc] init];
[jsonCN UpdateString: @"CN" value: @"cert common name"];

CkoCert *cert = [[CkoCert alloc] init];
success = [certStore FindCert: jsonCN cert: cert];
if (success == NO) {
    NSLog(@"%@",certStore.LastErrorText);
    return;
}

success = [socket SetSslClientCert: cert];

BOOL ssl = YES;
int maxWaitMillisec = 20000;

// The SSL server hostname may be an IP address, a domain name,
// or "localhost".  You'll need to change this:
NSString *sslServerHost = 0;
sslServerHost = @"123.123.88.88";
int sslServerPort = 8123;

// Connect to the SSL server:
success = [socket Connect: sslServerHost port: [NSNumber numberWithInt: sslServerPort] ssl: ssl maxWaitMs: [NSNumber numberWithInt: maxWaitMillisec]];
if (success != YES) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

// Set maximum timeouts for reading an writing (in millisec)
socket.MaxReadIdleMs = [NSNumber numberWithInt:20000];
socket.MaxSendIdleMs = [NSNumber numberWithInt:20000];

// Send a "Hello Server! -EOM-" message:
success = [socket SendString: @"Hello Server! -EOM-"];
if (success != YES) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

// The server (in this example) is going to send a "Hello Client! -EOM-" 
// message.  Read it:
NSString *receivedMsg = [socket ReceiveUntilMatch: @"-EOM-"];
if (socket.LastMethodSuccess != YES) {
    NSLog(@"%@",socket.LastErrorText);
    return;
}

// Close the connection with the server
// Wait a max of 20 seconds (20000 millsec)
success = [socket Close: [NSNumber numberWithInt: 20000]];

NSLog(@"%@",receivedMsg);