C++

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat C++ Downloads

Download Chilkat for C++

C++

#include <CkMailMan.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
    //  certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
    //  is the PFX path and the 2nd is the PFX password.

    CkMailMan mailman;

    //  Configure the SMTP server connection.
    mailman.put_SmtpHost("smtp.example.com");
    mailman.put_SmtpPort(465);
    mailman.put_SmtpSsl(true);
    mailman.put_SmtpUsername("user@example.com");
    mailman.put_SmtpPassword("myPassword");

    //  Load the client certificate directly from a PFX file.
    success = mailman.SetSslClientCertPfx("qa_data/certs/client.pfx","pfx_password");
    if (success == false) {
        std::cout << mailman.lastErrorText() << "\r\n";
        return;
    }

    success = mailman.VerifySmtpLogin();
    if (success == false) {
        std::cout << mailman.lastErrorText() << "\r\n";
        return;
    }

    std::cout << "Connected using a PFX TLS client certificate." << "\r\n";

    //  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
    //  relative to the current working directory of the running application.
    }