C++

Set the Decryption Certificate for MailMan

Demonstrates the Chilkat MailMan.SetDecryptCert method, which explicitly specifies the certificate to use when decrypting encrypted email. The certificate must correspond to the recipient certificate used to encrypt the message and must have access to its private key. This example loads the certificate from a PFX, registers it, and fetches a message that Chilkat can then decrypt.

Background: Decrypting S/MIME mail requires the recipient's private key, so the certificate you supply must carry it — which is why a PFX (certificate + private key in one password-protected file) is used here. Chilkat can find installed certificates automatically on Windows and macOS; SetDecryptCert is how you point it at a specific one instead. If the certificate and key live in separate files, use SetDecryptCert2.

Chilkat C++ Downloads

Download Chilkat for C++

C++

#include <CkMailMan.h>
#include <CkCert.h>
#include <CkEmail.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  Demonstrates the MailMan.SetDecryptCert method, which explicitly specifies the certificate
    //  to use when decrypting encrypted email.  The certificate must correspond to the recipient
    //  certificate used to encrypt the message, and must have access to its private key.

    CkMailMan mailman;

    //  Configure the POP3 server connection.
    mailman.put_MailHost("pop.example.com");
    mailman.put_MailPort(995);
    mailman.put_PopSsl(true);
    mailman.put_PopUsername("user@example.com");
    mailman.put_PopPassword("myPassword");

    //  Load the certificate together with its private key from a PFX file.
    CkCert cert;
    success = cert.LoadPfxFile("qa_data/certs/decryption.pfx","pfx_password");
    if (success == false) {
        std::cout << cert.lastErrorText() << "\r\n";
        return;
    }

    //  Specify the certificate to use when decrypting downloaded email.
    success = mailman.SetDecryptCert(cert);
    if (success == false) {
        std::cout << mailman.lastErrorText() << "\r\n";
        return;
    }

    //  Fetch a message; if it is encrypted, Chilkat decrypts it using this certificate.
    CkEmail email;
    success = mailman.FetchOne(false,0,1,email);
    if (success == false) {
        std::cout << mailman.lastErrorText() << "\r\n";
        return;
    }

    std::cout << "ReceivedEncrypted = " << email.get_ReceivedEncrypted() << "\r\n";
    std::cout << "Decrypted = " << email.get_Decrypted() << "\r\n";

    //  Note: The path "qa_data/certs/decryption.pfx" is a relative local filesystem path,
    //  relative to the current working directory of the running application.

    //  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
    //  connects and authenticates -- using the property settings above -- whenever a server
    //  operation requires it.  Calling the explicit connect/authenticate methods can still be
    //  helpful to determine whether a failure occurs while connecting or while authenticating.
    }