Swift

Verify SSL Server Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server and verify its SSL certificate. Swift

func chilkatTest() {
    var success: Bool = false

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let socket = CkoSocket()!

    var ssl: Bool = true
    var maxWaitMillisec: Int = 20000

    // The SSL server hostname may be an IP address, a domain name,
    // or "localhost". 
    var sslServerHost: String?
    sslServerHost = "www.paypal.com"
    var sslServerPort: Int = 443

    // Connect to the SSL server:
    success = socket.connect(hostname: sslServerHost, port: sslServerPort, ssl: ssl, maxWaitMs: maxWaitMillisec)
    if success == false {
        print("\(socket.lastErrorText!)")
        return
    }

    let cert = CkoCert()!

    var bExpired: Bool
    var bRevoked: Bool
    var bSignatureVerified: Bool
    var bTrustedRoot: Bool

    success = socket.getServerCert(cert: cert)
    if success != false {

        print("Server Certificate:")
        print("Distinguished Name: \(cert.subjectDN!)")
        print("Common Name: \(cert.subjectCN!)")
        print("Issuer Distinguished Name: \(cert.issuerDN!)")
        print("Issuer Common Name: \(cert.issuerCN!)")

        bExpired = cert.expired
        bRevoked = cert.revoked
        bSignatureVerified = cert.signatureVerified
        bTrustedRoot = cert.trustedRoot

        print("Expired: \(bExpired)")
        print("Revoked: \(bRevoked)")
        print("Signature Verified: \(bSignatureVerified)")
        print("Trusted Root: \(bTrustedRoot)")

    }

    // Close the connection with the server
    // Wait a max of 20 seconds (20000 millsec)
    success = socket.close(maxWaitMs: 20000)

}