JavaScript

Decrypt S/MIME using a Certificate with Private Key Access

Loads a CMS/PKCS #7 encrypted S/MIME message and decrypts it back to the original MIME content.

DecryptUsingCert takes a single certificate that already has access to its associated private key, for example a certificate loaded from a PFX.

The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background. A public-only certificate is insufficient for decryption. The certificate passed to DecryptUsingCert must be linked to its private key, as happens when it is loaded from a PFX/P12 file.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

JavaScript

var success = false;

var mime = new CkMime();
success = mime.LoadMimeFile("qa_data/encrypted.eml");
if (success == false) {
    console.log(mime.LastErrorText);
    return;
}

//  Decrypt using a certificate that already provides access to its private key (for example loaded
//  from a PFX).  The only argument is the certificate.
var pfxPassword = "myPfxPassword";
var cert = new CkCert();
success = cert.LoadPfxFile("qa_data/recipient.pfx",pfxPassword);
if (success == false) {
    console.log(cert.LastErrorText);
    return;
}

success = mime.DecryptUsingCert(cert);
if (success == false) {
    console.log(mime.LastErrorText);
    return;
}

var body = mime.GetBodyDecoded();
if (mime.LastMethodSuccess == false) {
    console.log(mime.LastErrorText);
    return;
}

console.log(body);