CkPython

SSL Client Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server using a client-side certificate, send a simple message, receive a simple response, and disconnect. CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

socket = chilkat.CkSocket()

# Create an instance of a certificate store object, load a PFX file,
# locate the certificate we need, and use it for signing.
# (a PFX file may contain more than one certificate.)
certStore = chilkat.CkCertStore()
# The 1st argument is the filename, the 2nd arg is the 
# PFX file's password:
success = certStore.LoadPfxFile("chilkat_secret.pfx","secret")
if (success != True):
    print(certStore.lastErrorText())
    sys.exit()

# Find the certificate by the subject common name:
jsonCN = chilkat.CkJsonObject()
jsonCN.UpdateString("CN","cert common name")

cert = chilkat.CkCert()
success = certStore.FindCert(jsonCN,cert)
if (success == False):
    print(certStore.lastErrorText())
    sys.exit()

success = socket.SetSslClientCert(cert)

ssl = True
maxWaitMillisec = 20000

# The SSL server hostname may be an IP address, a domain name,
# or "localhost".  You'll need to change this:

sslServerHost = "123.123.88.88"
sslServerPort = 8123

# Connect to the SSL server:
success = socket.Connect(sslServerHost,sslServerPort,ssl,maxWaitMillisec)
if (success != True):
    print(socket.lastErrorText())
    sys.exit()

# Set maximum timeouts for reading an writing (in millisec)
socket.put_MaxReadIdleMs(20000)
socket.put_MaxSendIdleMs(20000)

# Send a "Hello Server! -EOM-" message:
success = socket.SendString("Hello Server! -EOM-")
if (success != True):
    print(socket.lastErrorText())
    sys.exit()

# The server (in this example) is going to send a "Hello Client! -EOM-" 
# message.  Read it:
receivedMsg = socket.receiveUntilMatch("-EOM-")
if (socket.get_LastMethodSuccess() != True):
    print(socket.lastErrorText())
    sys.exit()

# Close the connection with the server
# Wait a max of 20 seconds (20000 millsec)
success = socket.Close(20000)

print(receivedMsg)