Apple Push Notifications - Certificates Based Connections to APNs (Part 4/4)

OpenSSL 

If you use openSSL, you must deploy the openSSL libraries with your application. Before set the certificate with the TsgcHTTP2Client, first this certificate must be converted to PEM format because openSSL doesn't allow to import P12 certificates directly.

Use the following commands to convert a single P12 certificate to a certificate in PEM format and a private key file

create PEM certificate file

 openssl pkcs12 -in INFILE.p12 -out OUTFILE.crt -nokeys

Create Private Key file

 openssl pkcs12 -in INFILE.p12 -out OUTFILE.key -nodes -nocerts

Once you have your certificate and private key in PEM format, you can configure the TsgcHTTP2Client as follows.

oHTTP := TsgcHTTP2Client.Create(nil);
oHTTP.TLSOptions.IOHandler := iohOpenSSL;
oHTTP.TLSOptions.CertFile := 'certificate_file.pem';
oHTTP.TLSOptions.KeyFile := 'private_key.pem';
oHTTP.TLSOptions.Password := 'certificate password';
oHTTP.TLSOptions.Version := tls1_2; 

SChannel 

If you use SChannel there is no need to deploy any libraries and the certificate downloaded from Apple can be directly imported without the need of a previous conversion to PEM format.

oHTTP := TsgcHTTP2Client.Create(nil);
oHTTP.TLSOptions.IOHandler := iohSChannel;
oHTTP.TLSOptions.CertFile := 'certificate_file.p12';
oHTTP.TLSOptions.Password := 'certificate password';
oHTTP.TLSOptions.Version := tls1_2;