Delphi ActiveX

Set the Decryption Certificate and Private Key

Demonstrates the Chilkat MailMan.SetDecryptCert2 method, which explicitly specifies both the certificate and its associated private key, as separate objects, to use when decrypting S/MIME encrypted email. This example loads a .cer certificate and a PEM private key, registers both, and fetches a message Chilkat can decrypt.

Background: Credentials are not always packaged together. When the certificate is a standalone .cer and the private key is a separate PEM (or other) file, SetDecryptCert2 takes the two objects individually. It is the two-object counterpart to SetDecryptCert, which expects a single certificate that already carries its private key (such as one loaded from a PFX).

Chilkat Delphi ActiveX Downloads

Download Chilkat for Delphi ActiveX

Delphi ActiveX

var
success: Integer;
mailman: TChilkatMailMan;
cert: TChilkatCert;
privKey: TPrivateKey;
email: TChilkatEmail;

begin
success := 0;

//  Demonstrates the MailMan.SetDecryptCert2 method, which explicitly specifies both the
//  certificate and its associated private key (as separate objects) to use when decrypting
//  S/MIME encrypted email.

mailman := TChilkatMailMan.Create(Self);

//  Configure the POP3 server connection.
mailman.MailHost := 'pop.example.com';
mailman.MailPort := 995;
mailman.PopSsl := 1;
mailman.PopUsername := 'user@example.com';
mailman.PopPassword := 'myPassword';

//  Load the certificate (public) and the matching private key from separate files.
cert := TChilkatCert.Create(Self);
success := cert.LoadFromFile('qa_data/certs/recipient.cer');
if (success = 0) then
  begin
    Memo1.Lines.Add(cert.LastErrorText);
    Exit;
  end;

privKey := TPrivateKey.Create(Self);
success := privKey.LoadPemFile('qa_data/certs/recipient_privkey.pem');
if (success = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;

//  Specify the certificate and private key to use when decrypting downloaded email.
success := mailman.SetDecryptCert2(cert.ControlInterface,privKey.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(mailman.LastErrorText);
    Exit;
  end;

//  Fetch a message; if it is encrypted, Chilkat decrypts it using the certificate and key.
email := TChilkatEmail.Create(Self);
success := mailman.FetchOne(0,0,1,email.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(mailman.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('Decrypted = ' + IntToStr(Ord(email.Decrypted)));

//  Note: Paths such as "qa_data/..." are relative local filesystem paths,
//  relative to the current working directory of the running application.

//  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
//  connects and authenticates -- using the property settings above -- whenever a server
//  operation requires it.  Calling the explicit connect/authenticate methods can still be
//  helpful to determine whether a failure occurs while connecting or while authenticating.