Objective-C

Set the Certificate for Decrypting S/MIME Email

Demonstrates the Chilkat Imap.SetDecryptCert method, which specifies the certificate used to decrypt S/MIME messages downloaded by this Imap object. The only argument is a Cert that has access to its private key. This example loads the certificate from a PFX file.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: An S/MIME-encrypted message can only be read with the recipient's private key. Once a decrypt certificate is set, Chilkat decrypts matching messages automatically as they are fetched, so your code works with plaintext Email objects. Use SetDecryptCert2 instead when the certificate object does not itself carry the private key.

Chilkat Objective-C Downloads

Download Chilkat for Objective-C

Objective-C

#import <CkoImap.h>
#import <NSString.h>
#import <CkoCert.h>

BOOL success = NO;

//  Demonstrates the Imap.SetDecryptCert method, which specifies the certificate used to decrypt
//  S/MIME messages downloaded by this Imap object.  The only argument is a Cert that has access
//  to its private key.

CkoImap *imap = [[CkoImap alloc] init];

imap.Ssl = YES;
imap.Port = [NSNumber numberWithInt:993];

success = [imap Connect: @"imap.example.com"];
if (success == NO) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

success = [imap Login: @"user@example.com" password: @"myPassword"];
if (success == NO) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

//  The PFX password is not hard-coded in source.  Insert code here to obtain it from an
//  interactive prompt, environment variable, or a secrets vault.
NSString *pfxPassword = 0;

//  Load a certificate (with private key) from a PFX file.
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadPfxFile: @"qa_data/smime.pfx" password: pfxPassword];
if (success == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

//  Use it to automatically decrypt S/MIME messages that are subsequently downloaded.
success = [imap SetDecryptCert: cert];
if (success == NO) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

success = [imap Disconnect];
if (success == NO) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}