Objective-C

Set the Decryption Certificate for MailMan

Demonstrates the Chilkat MailMan.SetDecryptCert method, which explicitly specifies the certificate to use when decrypting encrypted email. The certificate must correspond to the recipient certificate used to encrypt the message and must have access to its private key. This example loads the certificate from a PFX, registers it, and fetches a message that Chilkat can then decrypt.

Background: Decrypting S/MIME mail requires the recipient's private key, so the certificate you supply must carry it — which is why a PFX (certificate + private key in one password-protected file) is used here. Chilkat can find installed certificates automatically on Windows and macOS; SetDecryptCert is how you point it at a specific one instead. If the certificate and key live in separate files, use SetDecryptCert2.

Chilkat Objective-C Downloads

Download Chilkat for Objective-C

Objective-C

#import <CkoMailMan.h>
#import <CkoCert.h>
#import <CkoEmail.h>

BOOL success = NO;

//  Demonstrates the MailMan.SetDecryptCert method, which explicitly specifies the certificate
//  to use when decrypting encrypted email.  The certificate must correspond to the recipient
//  certificate used to encrypt the message, and must have access to its private key.

CkoMailMan *mailman = [[CkoMailMan alloc] init];

//  Configure the POP3 server connection.
mailman.MailHost = @"pop.example.com";
mailman.MailPort = [NSNumber numberWithInt:995];
mailman.PopSsl = YES;
mailman.PopUsername = @"user@example.com";
mailman.PopPassword = @"myPassword";

//  Load the certificate together with its private key from a PFX file.
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadPfxFile: @"qa_data/certs/decryption.pfx" password: @"pfx_password"];
if (success == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

//  Specify the certificate to use when decrypting downloaded email.
success = [mailman SetDecryptCert: cert];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

//  Fetch a message; if it is encrypted, Chilkat decrypts it using this certificate.
CkoEmail *email = [[CkoEmail alloc] init];
success = [mailman FetchOne: NO numBodyLines: [NSNumber numberWithInt: 0] msgNum: [NSNumber numberWithInt: 1] email: email];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

NSLog(@"%@%d",@"ReceivedEncrypted = ",email.ReceivedEncrypted);
NSLog(@"%@%d",@"Decrypted = ",email.Decrypted);

//  Note: The path "qa_data/certs/decryption.pfx" is a relative local filesystem path,
//  relative to the current working directory of the running application.

//  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
//  connects and authenticates -- using the property settings above -- whenever a server
//  operation requires it.  Calling the explicit connect/authenticate methods can still be
//  helpful to determine whether a failure occurs while connecting or while authenticating.