Java

Add a PFX Source (BinData) for S/MIME Decryption

Demonstrates the Chilkat Imap.AddPfxSourceBd method, which adds PFX data held in a BinData as a source of certificates and private keys for S/MIME processing. The first argument is the BinData and the second is the PFX password. Call it once for each additional source.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: When downloading encrypted (S/MIME) email, Chilkat needs the recipient's private key to decrypt it. Adding one or more PFX sources gives Chilkat a pool of keys to search; the matching key is used automatically as messages are fetched. The BinData form is handy when the PFX comes from memory — a database blob or a downloaded buffer — rather than a file on disk. On Windows and macOS the system certificate stores are also searched automatically.

Chilkat Java Downloads

Download Chilkat for Java

Chilkat2 Java

import com.chilkatsoft.chilkat2.BinData;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Imap;

public class ChilkatExample {

    public static void main(String[] args) {
        // Demonstrates the Imap.AddPfxSourceBd method, which adds PFX data (from a BinData) as a
        // source of certificates and private keys for S/MIME decryption.  The 1st argument is the
        // BinData containing the PFX, and the 2nd is the PFX password.

        Imap imap = new Imap();

        imap.setSsl(true);
        imap.setPort(993);

        try {
            imap.connect("imap.example.com");

            imap.login("user@example.com", "myPassword");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // Load the PFX data into a BinData.
        BinData bdPfx = new BinData();
        try {
            bdPfx.loadFile("qa_data/smime.pfx");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        // The PFX password is not hard-coded in source.  Insert code here to obtain it from an
        // interactive prompt, environment variable, or a secrets vault.
        String pfxPassword = "";

        // Add the PFX as a source for S/MIME certificates and private keys.  Call once per source.
        try {
            imap.addPfxSourceBd(bdPfx, pfxPassword);

            // Messages downloaded after this are automatically decrypted when a matching key is found.

            imap.disconnect();
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }
    }
}