Lianja

Get Recipient Certificate Info from Encrypted S/MIME

Demonstrates GetDecryptCertInfo, which examines an encrypted S/MIME entity and writes the recipient-certificate identifiers into a JsonObject. This reveals which certificate(s) the message was encrypted for, so the correct private key can be located before decrypting.

The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Tip: Code to parse the returned JSON can be generated with Chilkat's online tool at https://tools.chilkat.io/jsonParse.

Background. A CMS/PKCS #7 encrypted message carries recipient identifiers (such as issuer and serial number). Inspecting them lets an application determine, without decrypting, which key it needs.

Chilkat Lianja Downloads

Download Chilkat for Lianja

Lianja

llSuccess = .F.

loMime = createobject("CkMime")
llSuccess = loMime.LoadMimeFile("qa_data/encrypted.eml")
if (llSuccess = .F.) then
    ? loMime.LastErrorText
    release loMime
    return
endif

//  Examine the encrypted entity and write the recipient-certificate identifiers to a JsonObject.
//  This tells you which certificate(s) the message was encrypted for, so you can locate the right
//  private key before attempting to decrypt.
loCertInfo = createobject("CkJsonObject")
llSuccess = loMime.GetDecryptCertInfo(loCertInfo)
if (llSuccess = .F.) then
    ? loMime.LastErrorText
    release loMime
    release loCertInfo
    return
endif

loCertInfo.EmitCompact = .F.
lcJson = loCertInfo.Emit()
? lcJson
//  JSON parsing code for this result can be generated at Chilkat's online tool:
//  https://tools.chilkat.io/jsonParse


release loMime
release loCertInfo