PHP Extension

Get the Certificate Used to Decrypt an Email

Demonstrates the Chilkat Email.LastDecryptCert method, which copies the certificate used to decrypt this email into a Cert object. It should be called after a successful decryption. This example loads an encrypted email and, if it was decrypted, reads the decrypting certificate's common name.

Background: When a message could be decrypted with one of several available private keys, it is often useful to know which certificate actually did the job — for auditing, for confirming the message was encrypted for the expected identity, or for logging. LastDecryptCert hands you that certificate as an object so you can inspect its subject, issuer, validity dates, and more.

Chilkat PHP Extension Downloads

Download Chilkat for PHP Extension

PHP Extension

<?php

include("chilkat.php");

$success = false;

//  Demonstrates the LastDecryptCert method, which copies the certificate used to decrypt
//  this email into a Cert object.  Call it after a successful decryption.

$email = new CkEmail();

$success = $email->LoadEml('qa_data/eml/encrypted.eml');
if ($success == false) {
    print $email->lastErrorText() . "\n";
    exit;
}

if ($email->get_ReceivedEncrypted() == true) {
    if ($email->get_Decrypted() == true) {
        //  Get the certificate that was used to decrypt the email.
        $cert = new CkCert();
        $success = $email->LastDecryptCert($cert);
        if ($success == true) {
            print 'Decrypted with certificate (CN): ' . $cert->subjectCN() . "\n";
        }

    }

}

//  Note: The path "qa_data/..." is a relative local filesystem path,
//  relative to the current working directory of the running application.

?>