Delphi DLL

Check if an Email Was Received Digitally Signed

Demonstrates the read-only Chilkat Email.ReceivedSigned property, which is true if the email was originally received carrying one or more digital signatures. Knowing a message was signed is separate from knowing the signature checked out, so this example also reads SignaturesValid to report whether the signed content verified.

Background: A digital signature on an email (S/MIME) provides two things: authenticity (it was really sent by the holder of a particular certificate) and integrity (the content was not altered in transit). The sender signs a hash of the message with their private key; the recipient verifies it with the sender's public certificate. ReceivedSigned simply tells you a signature is present — verifying it is a separate step exposed through SignaturesValid.

Chilkat Delphi DLL Downloads

Download Chilkat for Delphi DLL

Delphi DLL

var
success: Boolean;
email: HCkEmail;

begin
success := False;

//  Demonstrates the read-only Email.ReceivedSigned property, which is true if this
//  email was originally received with a digital signature.  Use SignaturesValid to
//  determine whether the signed content actually verified.

email := CkEmail_Create();

success := CkEmail_LoadEml(email,'qa_data/eml/signed.eml');
if (success = False) then
  begin
    Memo1.Lines.Add(CkEmail__lastErrorText(email));
    Exit;
  end;

if (CkEmail_getReceivedSigned(email) = True) then
  begin
    Memo1.Lines.Add('This email was received with a digital signature.');
    if (CkEmail_getSignaturesValid(email) = True) then
      begin
        Memo1.Lines.Add('All signatures are valid.');
      end
    else
      begin
        Memo1.Lines.Add('One or more signatures are NOT valid.');
      end;
  end
else
  begin
    Memo1.Lines.Add('This email was not signed.');
  end;

//  Note: Paths such as "qa_data/..." are relative local filesystem paths,
//  relative to the current working directory of the running application.

CkEmail_Dispose(email);