(SQL Server) Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @socket int
    -- Use "Chilkat_9_5_0.Socket" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Socket', @socket OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @ssl int
    SELECT @ssl = 1
    DECLARE @maxWaitMillisec int
    SELECT @maxWaitMillisec = 20000

    -- The SSL server hostname may be an IP address, a domain name,
    -- or "localhost". 
    DECLARE @sslServerHost nvarchar(4000)

    SELECT @sslServerHost = 'www.paypal.com'
    DECLARE @sslServerPort int
    SELECT @sslServerPort = 443

    -- Connect to the SSL server:
    DECLARE @success int
    EXEC sp_OAMethod @socket, 'Connect', @success OUT, @sslServerHost, @sslServerPort, @ssl, @maxWaitMillisec
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @socket, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @socket
        RETURN
      END

    DECLARE @cert int

    DECLARE @bExpired int

    DECLARE @bRevoked int

    DECLARE @bSignatureVerified int

    DECLARE @bTrustedRoot int

    EXEC sp_OAMethod @socket, 'GetSslServerCert', @cert OUT
    EXEC sp_OAGetProperty @socket, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 <> 0
      BEGIN


        PRINT 'Server Certificate:'

        EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
        PRINT 'Distinguished Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
        PRINT 'Common Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'IssuerDN', @sTmp0 OUT
        PRINT 'Issuer Distinguished Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'IssuerCN', @sTmp0 OUT
        PRINT 'Issuer Common Name: ' + @sTmp0

        EXEC sp_OAGetProperty @cert, 'Expired', @bExpired OUT
        EXEC sp_OAGetProperty @cert, 'Revoked', @bRevoked OUT
        EXEC sp_OAGetProperty @cert, 'SignatureVerified', @bSignatureVerified OUT
        EXEC sp_OAGetProperty @cert, 'TrustedRoot', @bTrustedRoot OUT


        PRINT 'Expired: ' + @bExpired

        PRINT 'Revoked: ' + @bRevoked

        PRINT 'Signature Verified: ' + @bSignatureVerified

        PRINT 'Trusted Root: ' + @bTrustedRoot

        EXEC @hr = sp_OADestroy @cert

      END

    -- Close the connection with the server
    -- Wait a max of 20 seconds (20000 millsec)
    EXEC sp_OAMethod @socket, 'Close', @success OUT, 20000

    EXEC @hr = sp_OADestroy @socket


END
GO