Example for an SSL server plus a client, including client certificate. Needs the certs from my CL+SSL branch.

ssl-server+client.lisp

(in-package :cl-user)

(ql:quickload '(:hunchentoot :drakma))


(hunchentoot:define-easy-handler (root :uri "/")
    ()
  (let ((cert (hunchentoot:get-peer-ssl-certificate)))
    (format nil "It works: ~a"
            (unless (cffi:null-pointer-p cert)
              (cl+ssl:certificate-subject-common-names cert)))))


(defvar *my-ssl-acceptor* (hunchentoot:start
                            (make-instance 'hunchentoot:easy-ssl-acceptor
                                           :port 8001
                                           ;:access-log-destination  t
                                           :ssl-privatekey-file (namestring "test/certs/test-key-no-password.key")
                                           :ssl-certificate-file (namestring "test/certs/server+ca.crt"))))

;; Setup context for Hunchentoot
(setf cl+ssl::*ssl-global-context* 
      (cl+ssl:make-context :verify-mode cl+ssl:+ssl-verify-peer+ 
                           :verify-location `(,(namestring "test/certs/ca.crt")
                                               ,(namestring "test/certs/CACertSigningAuthority.crt"))
                           ))


(drakma:http-request "https://localhost:8001/"
                     :force-ssl t
                     :key (namestring "test/certs/test-key-no-password.key")
                     :certificate (namestring "test/certs/client.crt")
                     :ca-file (namestring "test/certs/ca.crt"))