Chilkat2-Python

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat Chilkat2-Python Downloads

Download Chilkat for Chilkat2-Python

Chilkat2-Python

import sys
import chilkat2

success = False

# Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
# certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
# is the PFX path and the 2nd is the PFX password.

mailman = chilkat2.MailMan()

# Configure the SMTP server connection.
mailman.SmtpHost = "smtp.example.com"
mailman.SmtpPort = 465
mailman.SmtpSsl = True
mailman.SmtpUsername = "user@example.com"
mailman.SmtpPassword = "myPassword"

# Load the client certificate directly from a PFX file.
success = mailman.SetSslClientCertPfx("qa_data/certs/client.pfx","pfx_password")
if (success == False):
    print(mailman.LastErrorText)
    sys.exit()

success = mailman.VerifySmtpLogin()
if (success == False):
    print(mailman.LastErrorText)
    sys.exit()

print("Connected using a PFX TLS client certificate.")

# Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
# relative to the current working directory of the running application.