(Ruby) Use a Custom Set of Trusted Root Certificates

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes.

Chilkat Ruby Downloads install from rubygems.org gem install chilkat or download... Ruby Library for Windows, MacOS, Linux, Alpine Linux

require 'chilkat'

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

trustedRoots = Chilkat::CkTrustedRoots.new()

#  Indicate that we will NOT trust any pre-installed certificates on the system.
trustedRoots.put_TrustSystemCaRoots(false)

# Thawte is a certificate authority that provides a .zip download of their
# root CA certificates:  https://www.thawte.com/roots/index.html
# The direct download link is: https://www.verisign.com/support/thawte-roots.zip
# Note: The above URLs are valid at the time of writing this example (29-May-2015).

# Assuming the .zip has already been downloaded, open it and load each .pem file into
# our trusted roots object.
zip = Chilkat::CkZip.new()

# Open a .zip containing PEM files, among other things..
success = zip.OpenZip("qa_data/certs/thawte-roots.zip")
if (success != true)
    print zip.lastErrorText() + "\n";
    exit
end

# entry is a CkZipEntry
entry = zip.FirstMatchingEntry("*.pem")
if (zip.get_LastMethodSuccess() != true)
    print "No entries matched." + "\n";
    exit
end

cert = Chilkat::CkCert.new()

bHasMoreEntries = true
while (bHasMoreEntries == true)

    print "Entry: " + entry.fileName() + "\n";

    # Get the PEM of the CA cert:
    pemStr = entry.unzipToString(0,"utf-8")

    # Load it into a certificate object:
    success = cert.LoadPem(pemStr)
    if (success != true)
        print cert.lastErrorText() + "\n";
    end

    # Add it to the trusted roots.
    trustedRoots.AddCert(cert)

    # The NextMatchingEntry method was added in v9.5.0.50
    # nextEntry is a CkZipEntry
    nextEntry = entry.NextMatchingEntry("*.pem")
    bHasMoreEntries = entry.get_LastMethodSuccess()

    # entry is a CkZipEntry
    entry = nextEntry
end

#  Activate the trusted roots globally for all Chilkat objects.
#  This call really shouldn't fail, so we're not checking the return value.
success = trustedRoots.Activate()