Lua

Add a PFX Source (BinData) for S/MIME Decryption

Demonstrates the Chilkat Imap.AddPfxSourceBd method, which adds PFX data held in a BinData as a source of certificates and private keys for S/MIME processing. The first argument is the BinData and the second is the PFX password. Call it once for each additional source.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: When downloading encrypted (S/MIME) email, Chilkat needs the recipient's private key to decrypt it. Adding one or more PFX sources gives Chilkat a pool of keys to search; the matching key is used automatically as messages are fetched. The BinData form is handy when the PFX comes from memory — a database blob or a downloaded buffer — rather than a file on disk. On Windows and macOS the system certificate stores are also searched automatically.

Chilkat Lua Downloads

Download Chilkat for Lua

Lua

local chilkat = require("chilkat")

-- Demonstrates the Imap.AddPfxSourceBd method, which adds PFX data (from a BinData) as a
-- source of certificates and private keys for S/MIME decryption.  The 1st argument is the
-- BinData containing the PFX, and the 2nd is the PFX password.

local imap = chilkat.Imap.new()

imap.ssl = true
imap.port = 993

local success = imap:connect("imap.example.com")
if not success then
    print(imap.last_error_text)
    return
end

success = imap:login("user@example.com", "myPassword")
if not success then
    print(imap.last_error_text)
    return
end

-- Load the PFX data into a BinData.
local bdPfx = chilkat.BinData.new()
success = bdPfx:load_file("qa_data/smime.pfx")
if not success then
    print(bdPfx.last_error_text)
    return
end

-- The PFX password is not hard-coded in source.  Insert code here to obtain it from an
-- interactive prompt, environment variable, or a secrets vault.
local pfxPassword = ""

-- Add the PFX as a source for S/MIME certificates and private keys.  Call once per source.
success = imap:add_pfx_source_bd(bdPfx, pfxPassword)
if not success then
    print(imap.last_error_text)
    return
end

-- Messages downloaded after this are automatically decrypted when a matching key is found.

success = imap:disconnect()
if not success then
    print(imap.last_error_text)
    return
end