(PowerBuilder) Examine SSL/TLS Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how an application can examine and check a server's SSL/TLS certificate.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Socket
integer li_UseTls
integer li_MaxWaitMs
integer li_Success
oleobject loo_Cert

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Socket = create oleobject
li_rc = loo_Socket.ConnectToNewObject("Chilkat_9_5_0.Socket")
if li_rc < 0 then
    destroy loo_Socket
    MessageBox("Error","Connecting to COM object failed")
    return
end if

// Connect to a server.
li_UseTls = 1
li_MaxWaitMs = 2000
li_Success = loo_Socket.Connect("www.intel.com",443,li_UseTls,li_MaxWaitMs)
if li_Success = 0 then
    Write-Debug loo_Socket.LastErrorText
    destroy loo_Socket
    return
end if

// If we get here, the TLS connection ws made..
// In any SSL/TLS handshake, the server sends its certificate in a TLS handshake message.
// Chilkat will keep it cached within the object that made the connection.
// Get the server's cert and examine a few things.
loo_Cert = loo_Socket.GetSslServerCert()
if loo_Socket.LastMethodSuccess = 0 then
    // This is unexpected..
    Write-Debug loo_Socket.LastErrorText
    destroy loo_Socket
    return
end if

Write-Debug "Distinguished Name: " + loo_Cert.SubjectDN
Write-Debug "Common Name: " + loo_Cert.SubjectCN
Write-Debug "Issuer Distinguished Name: " + loo_Cert.IssuerDN
Write-Debug "Issuer Common Name: " + loo_Cert.IssuerCN

Write-Debug "Expired: " + string(loo_Cert.Expired)
Write-Debug "Revoked: " + string(loo_Cert.Revoked)
Write-Debug "Signature Verified: " + string(loo_Cert.SignatureVerified)
Write-Debug "Trusted Root: " + string(loo_Cert.TrustedRoot)

// Sample output:

// Distinguished Name: C=US, ST=California, O=Intel Corporation, CN=*.intel.com
// Common Name: *.intel.com
// Issuer Distinguished Name: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
// Issuer Common Name: Sectigo RSA Organization Validation Secure Server CA
// Expired: False
// Revoked: False
// Signature Verified: True
// Trusted Root: True

destroy loo_Cert


destroy loo_Socket