Objective-C

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat Objective-C Downloads

Download Chilkat for Objective-C

Objective-C

#import <CkoMailMan.h>

BOOL success = NO;

//  Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
//  certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
//  is the PFX path and the 2nd is the PFX password.

CkoMailMan *mailman = [[CkoMailMan alloc] init];

//  Configure the SMTP server connection.
mailman.SmtpHost = @"smtp.example.com";
mailman.SmtpPort = [NSNumber numberWithInt:465];
mailman.SmtpSsl = YES;
mailman.SmtpUsername = @"user@example.com";
mailman.SmtpPassword = @"myPassword";

//  Load the client certificate directly from a PFX file.
success = [mailman SetSslClientCertPfx: @"qa_data/certs/client.pfx" pfxPassword: @"pfx_password"];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

success = [mailman VerifySmtpLogin];
if (success == NO) {
    NSLog(@"%@",mailman.LastErrorText);
    return;
}

NSLog(@"%@",@"Connected using a PFX TLS client certificate.");

//  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
//  relative to the current working directory of the running application.