PHP Extension

Set Cert and Private Key for S/MIME Decryption

Demonstrates the Chilkat Imap.SetDecryptCert2 method, which specifies a certificate together with a separately supplied private key for decrypting S/MIME messages. The first argument is the Cert and the second is the PrivateKey. This example loads the certificate and key from separate files.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: Sometimes the certificate (the public part) and the private key are stored separately — a .cer alongside a PEM key file, for instance. This method pairs them explicitly, whereas SetDecryptCert expects a single Cert that already provides its private key. After the pairing, subsequently downloaded S/MIME messages are decrypted automatically.

Chilkat PHP Extension Downloads

Download Chilkat for PHP Extension

PHP Extension

<?php

include("chilkat.php");

$success = false;

//  Demonstrates the Imap.SetDecryptCert2 method, which specifies a certificate together with a
//  separately supplied private key for decrypting S/MIME messages.  The 1st argument is the
//  Cert and the 2nd is the PrivateKey.

$imap = new CkImap();

$imap->put_Ssl(true);
$imap->put_Port(993);

$success = $imap->Connect('imap.example.com');
if ($success == false) {
    print $imap->lastErrorText() . "\n";
    exit;
}

$success = $imap->Login('user@example.com','myPassword');
if ($success == false) {
    print $imap->lastErrorText() . "\n";
    exit;
}

//  Load the certificate and its private key from separate files.
$cert = new CkCert();
$success = $cert->LoadFromFile('qa_data/smime.cer');
if ($success == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

$privKey = new CkPrivateKey();
$success = $privKey->LoadPemFile('qa_data/smime_privkey.pem');
if ($success == false) {
    print $privKey->lastErrorText() . "\n";
    exit;
}

//  Use the cert and key to automatically decrypt subsequently downloaded S/MIME messages.
$success = $imap->SetDecryptCert2($cert,$privKey);
if ($success == false) {
    print $imap->lastErrorText() . "\n";
    exit;
}

$success = $imap->Disconnect();
if ($success == false) {
    print $imap->lastErrorText() . "\n";
    exit;
}


?>