Tcl

SSL Client Certificate

See more Socket/SSL/TLS Examples

Demonstrates how to connect to an SSL server using a client-side certificate, send a simple message, receive a simple response, and disconnect. Tcl

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set socket [new_CkSocket]

# Create an instance of a certificate store object, load a PFX file,
# locate the certificate we need, and use it for signing.
# (a PFX file may contain more than one certificate.)
set certStore [new_CkCertStore]

# The 1st argument is the filename, the 2nd arg is the 
# PFX file's password:
set success [CkCertStore_LoadPfxFile $certStore "chilkat_secret.pfx" "secret"]
if {$success != 1} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkSocket $socket
    delete_CkCertStore $certStore
    exit
}

# Find the certificate by the subject common name:
set jsonCN [new_CkJsonObject]

CkJsonObject_UpdateString $jsonCN "CN" "cert common name"

set cert [new_CkCert]

set success [CkCertStore_FindCert $certStore $jsonCN $cert]
if {$success == 0} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkSocket $socket
    delete_CkCertStore $certStore
    delete_CkJsonObject $jsonCN
    delete_CkCert $cert
    exit
}

set success [CkSocket_SetSslClientCert $socket $cert]

set ssl 1
set maxWaitMillisec 20000

# The SSL server hostname may be an IP address, a domain name,
# or "localhost".  You'll need to change this:

set sslServerHost "123.123.88.88"
set sslServerPort 8123

# Connect to the SSL server:
set success [CkSocket_Connect $socket $sslServerHost $sslServerPort $ssl $maxWaitMillisec]
if {$success != 1} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCertStore $certStore
    delete_CkJsonObject $jsonCN
    delete_CkCert $cert
    exit
}

# Set maximum timeouts for reading an writing (in millisec)
CkSocket_put_MaxReadIdleMs $socket 20000
CkSocket_put_MaxSendIdleMs $socket 20000

# Send a "Hello Server! -EOM-" message:
set success [CkSocket_SendString $socket "Hello Server! -EOM-"]
if {$success != 1} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCertStore $certStore
    delete_CkJsonObject $jsonCN
    delete_CkCert $cert
    exit
}

# The server (in this example) is going to send a "Hello Client! -EOM-" 
# message.  Read it:
set receivedMsg [CkSocket_receiveUntilMatch $socket "-EOM-"]
if {[CkSocket_get_LastMethodSuccess $socket] != 1} then {
    puts [CkSocket_lastErrorText $socket]
    delete_CkSocket $socket
    delete_CkCertStore $certStore
    delete_CkJsonObject $jsonCN
    delete_CkCert $cert
    exit
}

# Close the connection with the server
# Wait a max of 20 seconds (20000 millsec)
set success [CkSocket_Close $socket 20000]

puts "$receivedMsg"

delete_CkSocket $socket
delete_CkCertStore $certStore
delete_CkJsonObject $jsonCN
delete_CkCert $cert