Delphi DLL

Set the Decryption Certificate for MailMan

Demonstrates the Chilkat MailMan.SetDecryptCert method, which explicitly specifies the certificate to use when decrypting encrypted email. The certificate must correspond to the recipient certificate used to encrypt the message and must have access to its private key. This example loads the certificate from a PFX, registers it, and fetches a message that Chilkat can then decrypt.

Background: Decrypting S/MIME mail requires the recipient's private key, so the certificate you supply must carry it — which is why a PFX (certificate + private key in one password-protected file) is used here. Chilkat can find installed certificates automatically on Windows and macOS; SetDecryptCert is how you point it at a specific one instead. If the certificate and key live in separate files, use SetDecryptCert2.

Chilkat Delphi DLL Downloads

Download Chilkat for Delphi DLL

Delphi DLL

var
success: Boolean;
mailman: HCkMailMan;
cert: HCkCert;
email: HCkEmail;

begin
success := False;

//  Demonstrates the MailMan.SetDecryptCert method, which explicitly specifies the certificate
//  to use when decrypting encrypted email.  The certificate must correspond to the recipient
//  certificate used to encrypt the message, and must have access to its private key.

mailman := CkMailMan_Create();

//  Configure the POP3 server connection.
CkMailMan_putMailHost(mailman,'pop.example.com');
CkMailMan_putMailPort(mailman,995);
CkMailMan_putPopSsl(mailman,True);
CkMailMan_putPopUsername(mailman,'user@example.com');
CkMailMan_putPopPassword(mailman,'myPassword');

//  Load the certificate together with its private key from a PFX file.
cert := CkCert_Create();
success := CkCert_LoadPfxFile(cert,'qa_data/certs/decryption.pfx','pfx_password');
if (success = False) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

//  Specify the certificate to use when decrypting downloaded email.
success := CkMailMan_SetDecryptCert(mailman,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkMailMan__lastErrorText(mailman));
    Exit;
  end;

//  Fetch a message; if it is encrypted, Chilkat decrypts it using this certificate.
email := CkEmail_Create();
success := CkMailMan_FetchOne(mailman,False,0,1,email);
if (success = False) then
  begin
    Memo1.Lines.Add(CkMailMan__lastErrorText(mailman));
    Exit;
  end;

Memo1.Lines.Add('ReceivedEncrypted = ' + IntToStr(Ord(CkEmail_getReceivedEncrypted(email))));
Memo1.Lines.Add('Decrypted = ' + IntToStr(Ord(CkEmail_getDecrypted(email))));

//  Note: The path "qa_data/certs/decryption.pfx" is a relative local filesystem path,
//  relative to the current working directory of the running application.

//  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
//  connects and authenticates -- using the property settings above -- whenever a server
//  operation requires it.  Calling the explicit connect/authenticate methods can still be
//  helpful to determine whether a failure occurs while connecting or while authenticating.

CkMailMan_Dispose(mailman);
CkCert_Dispose(cert);
CkEmail_Dispose(email);