TElIndySSLServerIOHandler.OnCertificateNeededEx event

TElIndySSLServerIOHandler.OnCertificateNeededEx

This event is fired when the protocol requires a client certificate. gives much more flexibility.

Declaration

[C#]
not available

[VB.NET]
not available

[Pascal]
property OnCertificateNeededEx : TSBCertificateNeededExEvent;
TSBCertificateNeededExEvent = procedure (Sender: TObject; var Certificate : TElX509Certificate) of object;

[C++]
not available

[PHP]
not available

[Java]
not available

Parameters

Certificate - points to instance of TElX509Certificate class (see noted below)

Description

This event is fired by TElIndySSLServerIOHandler when the negotiated protocol requires a client-side X509 certificate to be used during session. TElIdFTPIOHandlerSocket fires OnCertificateNeededEx event consequently, until the nil/NULL value is passed as Certificate parameter. This gives the ability to pass a certificate chain to server, not only a single certificate. This event should be handled in the following way:

Pass the whole certificate chain, beginning at end-entity certificate with a corresponding private key.
When the chain is over, pass nil/NULL as Certificate parameter.

OnCertificateNeededEx can accept the certificate which belongs to the certain chain. In this case the whole chain is sent and OnCertificateNeededEx is not fired further.