PowerBuilder

Examine SSL/TLS Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how an application can examine and check a server's SSL/TLS certificate. PowerBuilder

integer li_rc
integer li_Success
oleobject loo_Socket
integer li_UseTls
integer li_MaxWaitMs
oleobject loo_Cert

li_Success = 0

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Socket = create oleobject
li_rc = loo_Socket.ConnectToNewObject("Chilkat.Socket")
if li_rc < 0 then
    destroy loo_Socket
    MessageBox("Error","Connecting to COM object failed")
    return
end if

// Connect to a server.
li_UseTls = 1
li_MaxWaitMs = 2000
li_Success = loo_Socket.Connect("www.intel.com",443,li_UseTls,li_MaxWaitMs)
if li_Success = 0 then
    Write-Debug loo_Socket.LastErrorText
    destroy loo_Socket
    return
end if

// If we get here, the TLS connection ws made..
// In any SSL/TLS handshake, the server sends its certificate in a TLS handshake message.
// Chilkat will keep it cached within the object that made the connection.
// Get the server's cert and examine a few things.
loo_Cert = create oleobject
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")

loo_Socket.GetServerCert(loo_Cert)

Write-Debug "Distinguished Name: " + loo_Cert.SubjectDN
Write-Debug "Common Name: " + loo_Cert.SubjectCN
Write-Debug "Issuer Distinguished Name: " + loo_Cert.IssuerDN
Write-Debug "Issuer Common Name: " + loo_Cert.IssuerCN

Write-Debug "Expired: " + string(loo_Cert.Expired)
Write-Debug "Revoked: " + string(loo_Cert.Revoked)
Write-Debug "Signature Verified: " + string(loo_Cert.SignatureVerified)
Write-Debug "Trusted Root: " + string(loo_Cert.TrustedRoot)

// Sample output:

// Distinguished Name: C=US, ST=California, O=Intel Corporation, CN=*.intel.com
// Common Name: *.intel.com
// Issuer Distinguished Name: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
// Issuer Common Name: Sectigo RSA Organization Validation Secure Server CA
// Expired: False
// Revoked: False
// Signature Verified: True
// Trusted Root: True


destroy loo_Socket
destroy loo_Cert