Skip to content

httpsclient set chain

Matthias Görges edited this page Oct 16, 2016 · 3 revisions

httpsclient-set-chain enables server verification again certificate chain. This is highly recommended as it protects against fake certificates!

Parameter Description
certchain File which contains CA certificates for verification purposes

Example

Example 1: Get front page of www.google.com, but do so securely using Linux SSL cache.

(define httpsclient:buf (##still-copy (make-u8vector 1024)))
(httpsclient-set-chain "/etc/ssl/certs/ca-certificates.crt")
(if (fx= (httpsclient-open "www.google.com") 1) (begin
  (httpsclient-send (string->u8vector "GET / HTTP/1.0\r\nHost: www.google.com\r\n\r\n"))
  (if (fx> (httpsclient-recv httpsclient:buf) 0)
    (display (u8vector->string httpsclient:buf))(newline))
  (httpsclient-close)
))
Clone this wiki locally