(Unicode C) Verify FTP SSL Server Certificate

This example demonstrates how to verify the FTP server's certificate and authenticity. The intent is to verify the authenticity of the server before passing a login/password to it.

Chilkat C/C++ Library Downloads
MS Visual C/C++ Linux/CentOS C/C++ Alpine Linux C/C++ MAC OS X C/C++	armhf/aarch64 C/C++ C++ Builder iOS C/C++ Android C/C++	Solaris C/C++ MinGW C/C++

#include <C_CkFtp2W.h>
#include <C_CkCertW.h>

void ChilkatSample(void)
    {
    HCkFtp2W ftp;
    BOOL success;
    HCkCertW cert;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    ftp = CkFtp2W_Create();

    CkFtp2W_putHostname(ftp,L"ftp.myftpserver.com");
    CkFtp2W_putUsername(ftp,L"myUsername");
    CkFtp2W_putPassword(ftp,L"myPassword");

    // Establish an AUTH SSL secure channel after connection
    // on the standard FTP port 21.
    CkFtp2W_putAuthSsl(ftp,TRUE);

    // The Ssl property is for establishing an implicit SSL connection
    // on port 990.  Do not set it.
    CkFtp2W_putSsl(ftp,FALSE);

    // Indicate that the FTP server must have a verifiable SSL certificate.
    // Do not accept self-signed certs or certificates that are
    // expired, revoked, or cannot be verified to a root authority:
    CkFtp2W_putRequireSslCertVerify(ftp,TRUE);

    // You may also set a requirement.  In this example,
    // the certificate's Common Name (CN) must match the
    // required string exactly:
    CkFtp2W_SetSslCertRequirement(ftp,L"subjectcn",L"Chilkat Software, Inc.");

    // Connect and login to the FTP server.
    success = CkFtp2W_Connect(ftp);
    if (success != TRUE) {
        wprintf(L"%s\n",CkFtp2W_lastErrorText(ftp));
        CkFtp2W_Dispose(ftp);
        return;
    }
    else {
        // LastErrorText contains information even when
        // successful. This allows you to visually verify
        // that the secure connection actually occurred.
        wprintf(L"%s\n",CkFtp2W_lastErrorText(ftp));
    }

    // After logging on, you may examine the FTP server's cert:

    cert = CkFtp2W_GetSslServerCert(ftp);
    if (CkFtp2W_getLastMethodSuccess(ftp) != TRUE) {
        wprintf(L"No server certificate!\n");
    }
    else {
        // Display the distinguished name of the SSL cert.
        wprintf(L"%s\n",CkCertW_subjectDN(cert));
    }

    wprintf(L"Secure FTP Channel Established!\n");

    // Do whatever you're doing to do ...
    // upload files, download files, etc...

    success = CkFtp2W_Disconnect(ftp);


    CkFtp2W_Dispose(ftp);

    }