SSL POP3 with Certificates

Demonstrates how to use a client-side certificate with an SSL connection to a POP3 server. Also demonstrates how to get the POP3 server's SSL certificate.

Download Chilkat Python 2.5 Library

Download Chilkat Python 2.6 Library

Download Chilkat Python 2.6 Library (x64)

import sys
import chilkat

#  The mailman object is used for receiving (POP3)
#  and sending (SMTP) email.
mailman = chilkat.CkMailMan()

#  Any string argument automatically begins the 30-day trial.
success = mailman.UnlockComponent("30-day trial")
if (success != True):
    print "Component unlock failed"
    sys.exit()

#  Set the GMail account POP3 properties.
mailman.put_MailHost("pop.gmail.com")
mailman.put_PopUsername("chilkat.support")
mailman.put_PopPassword("****")
mailman.put_PopSsl(True)
mailman.put_MailPort(995)

#  Use our certificate, which is already installed
#  in our current-user certificate store on the computer.
clientCert = chilkat.CkCert()
success = clientCert.LoadByCommonName("Chilkat Software, Inc.")
if (success != True):
    print clientCert.lastErrorText()
    sys.exit()

#  Note: The GMail POP3 server does not require that you
#  have a client cert.  This example only demonstrates
#  how you may use a client certificate.  Typically,
#  higher-security systems may require a client-side SSL cert.
mailman.SetSslClientCert(clientCert)

#  Establish a POP3 connection:
success = mailman.Pop3BeginSession()
if (success != True):
    print mailman.lastErrorText()
    sys.exit()

#  Let's look at the LastErrorText to see the details
#  of the successful connection.  We should see our cert:
print mailman.lastErrorText()

#  OK, now examine the server's cert:

serverCert = mailman.GetPop3SslServerCert()
if (serverCert == None ):
    print "No server cert available."
else:
    print "Server SSL certificate:"
    print serverCert.subjectDN()

    #  Was the server certificate verified?
    #  It's not necessarily an error if the SSL Server cert is not verified.
    if (mailman.get_Pop3SslServerCertVerified() == True):
        print "Server SSL certificate was verified."
    else:
        print "Server SSL certificate was NOT verified!"