Objective-C

Set the Decryption Certificate and Private Key

Demonstrates the Chilkat MailMan.SetDecryptCert2 method, which explicitly specifies both the certificate and its associated private key, as separate objects, to use when decrypting S/MIME encrypted email. This example loads a .cer certificate and a PEM private key, registers both, and fetches a message Chilkat can decrypt.

Background: Credentials are not always packaged together. When the certificate is a standalone .cer and the private key is a separate PEM (or other) file, SetDecryptCert2 takes the two objects individually. It is the two-object counterpart to SetDecryptCert, which expects a single certificate that already carries its private key (such as one loaded from a PFX).

Chilkat Objective-C Downloads

Download Chilkat for Objective-C

Objective-C

#import <CkoMailMan.h>
#import <CkoCert.h>
#import <CkoPrivateKey.h>
#import <CkoEmail.h>

BOOL success = NO;

//  Demonstrates the MailMan.SetDecryptCert2 method, which explicitly specifies both the
//  certificate and its associated private key (as separate objects) to use when decrypting
//  S/MIME encrypted email.

CkoMailMan *mailman = [[CkoMailMan alloc] init];

//  Configure the POP3 server connection.
mailman.MailHost = @"pop.example.com";
mailman.MailPort = [NSNumber numberWithInt:995];
mailman.PopSsl = YES;
mailman.PopUsername = @"user@example.com";
mailman.PopPassword = @"myPassword";

//  Load the certificate (public) and the matching private key from separate files.
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadFromFile: @"qa_data/certs/recipient.cer"];
if (success == NO) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

CkoPrivateKey *privKey = [[CkoPrivateKey alloc] init];
success = [privKey LoadPemFile: @"qa_data/certs/recipient_privkey.pem"];
if (success == NO) {
    NSLog(@"%@",privKey.LastErrorText);
    return;
}

//  Specify the certificate and private key to use when decrypting downloaded email.
success = [mailman SetDecryptCert2: cert key: privKey];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

//  Fetch a message; if it is encrypted, Chilkat decrypts it using the certificate and key.
CkoEmail *email = [[CkoEmail alloc] init];
success = [mailman FetchOne: NO numBodyLines: [NSNumber numberWithInt: 0] msgNum: [NSNumber numberWithInt: 1] email: email];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

NSLog(@"%@%d",@"Decrypted = ",email.Decrypted);

//  Note: Paths such as "qa_data/..." are relative local filesystem paths,
//  relative to the current working directory of the running application.

//  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
//  connects and authenticates -- using the property settings above -- whenever a server
//  operation requires it.  Calling the explicit connect/authenticate methods can still be
//  helpful to determine whether a failure occurs while connecting or while authenticating.