PHP

Get the Certificate Used to Decrypt an Email

Demonstrates the Chilkat Email.LastDecryptCert method, which copies the certificate used to decrypt this email into a Cert object. It should be called after a successful decryption. This example loads an encrypted email and, if it was decrypted, reads the decrypting certificate's common name.

Background: When a message could be decrypted with one of several available private keys, it is often useful to know which certificate actually did the job — for auditing, for confirming the message was encrypted for the expected identity, or for logging. LastDecryptCert hands you that certificate as an object so you can inspect its subject, issuer, validity dates, and more.

Chilkat PHP Downloads

Download Chilkat for PHP

Chilkat2 PHP

<?php

use Chilkat2\Cert;
use Chilkat2\Email;

$success = false;

// Demonstrates the LastDecryptCert method, which copies the certificate used to decrypt
// this email into a Cert object.  Call it after a successful decryption.

$email = new Email();

try {
    $email->LoadEml('qa_data/eml/encrypted.eml');
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

if ($email->ReceivedEncrypted) {
    if ($email->Decrypted) {
        // Get the certificate that was used to decrypt the email.
        $cert = new Cert();
        try {
            $email->LastDecryptCert($cert);
            $success = true;
        } catch (\Chilkat2\Exception $e) {
            $success = false;
        }
        if ($success) {
            echo 'Decrypted with certificate (CN): ', $cert->SubjectCN, "\n";
        }
    }
}

// Note: The path "qa_data/..." is a relative local filesystem path,
// relative to the current working directory of the running application.