(Swift) Verify SSL Server Certificate

Demonstrates how to connect to an SSL server and verify its SSL certificate.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    var success: Bool = false

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let socket = CkoSocket()!

    var ssl: Bool = true
    var maxWaitMillisec: Int = 20000

    // The SSL server hostname may be an IP address, a domain name,
    // or "localhost". 
    var sslServerHost: String?
    sslServerHost = "www.paypal.com"
    var sslServerPort: Int = 443

    // Connect to the SSL server:
    success = socket.connect(sslServerHost, port: sslServerPort, ssl: ssl, maxWaitMs: maxWaitMillisec)
    if success == false {
        print("\(socket.lastErrorText!)")
        return
    }

    let cert = CkoCert()!

    var bExpired: Bool
    var bRevoked: Bool
    var bSignatureVerified: Bool
    var bTrustedRoot: Bool

    success = socket.getServer(cert)
    if success != false {

        print("Server Certificate:")
        print("Distinguished Name: \(cert.subjectDN!)")
        print("Common Name: \(cert.subjectCN!)")
        print("Issuer Distinguished Name: \(cert.issuerDN!)")
        print("Issuer Common Name: \(cert.issuerCN!)")

        bExpired = cert.expired
        bRevoked = cert.revoked
        bSignatureVerified = cert.signatureVerified
        bTrustedRoot = cert.trustedRoot

        print("Expired: \(bExpired)")
        print("Revoked: \(bRevoked)")
        print("Signature Verified: \(bSignatureVerified)")
        print("Trusted Root: \(bTrustedRoot)")

    }

    // Close the connection with the server
    // Wait a max of 20 seconds (20000 millsec)
    success = socket.close(20000)

}