Lazarus Pascal

Require SSL Server Certificate Domain Match

See more HTTP Examples

Demonstrates how to require that the SSL server certificate's domain matches the intended domain. Lazarus Pascal

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Http;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  http: THttp;
  html: string;

begin
  success := False;

  //  This example assumes the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  http := THttp.Create;

  //  Call SetSslCertRequirement to require that the SSL server certificate's domain
  //  matches only the domain we are intending to communicate with.

  //  In this example we will test with the URL https://wrong.host.badssl.com/
  //  which intentionally has an SSL certificate that does not match "wrong.host.badssl.com"

  http.SetSslCertRequirement('SAN','wrong.host.badssl.com');

  //  Also validate the server cert..
  http.RequireSslCertVerify := True;

  //  Try sending the request.  It should fail within the SSL/TLS handshake
  //  because the server's certificate does not match the domain "wrong.host.badssl.com"
  html := http.QuickGetStr('https://wrong.host.badssl.com/');
  if (http.LastMethodSuccess = False) then
    begin
      WriteLn(http.LastErrorText);
    end
  else
    begin
      WriteLn('Unexpected success.');
    end;


  http.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.