Decrypt S/MIME using a Certificate with Private Key Access

See more MIME Examples

Loads a CMS/PKCS #7 encrypted S/MIME message and decrypts it back to the original MIME content.

DecryptUsingCert takes a single certificate that already has access to its associated private key, for example a certificate loaded from a PFX.

The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

var
success: Boolean;
mime: HCkMime;
pfxPassword: PWideChar;
cert: HCkCert;
body: PWideChar;

begin
success := False;

mime := CkMime_Create();
success := CkMime_LoadMimeFile(mime,'qa_data/encrypted.eml');
if (success = False) then
  begin
    Memo1.Lines.Add(CkMime__lastErrorText(mime));
    Exit;
  end;

//  Decrypt using a certificate that already provides access to its private key (for example loaded
//  from a PFX).  The only argument is the certificate.
pfxPassword := 'myPfxPassword';
cert := CkCert_Create();
success := CkCert_LoadPfxFile(cert,'qa_data/recipient.pfx',pfxPassword);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(cert));
    Exit;
  end;

success := CkMime_DecryptUsingCert(mime,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkMime__lastErrorText(mime));
    Exit;
  end;

body := CkMime__getBodyDecoded(mime);
if (CkMime_getLastMethodSuccess(mime) = False) then
  begin
    Memo1.Lines.Add(CkMime__lastErrorText(mime));
    Exit;
  end;
Memo1.Lines.Add(body);

CkMime_Dispose(mime);
CkCert_Dispose(cert);