PHP Extension

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat PHP Extension Downloads

Download Chilkat for PHP Extension

PHP Extension

<?php

include("chilkat.php");

$success = false;

//  Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
//  certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
//  is the PFX path and the 2nd is the PFX password.

$mailman = new CkMailMan();

//  Configure the SMTP server connection.
$mailman->put_SmtpHost('smtp.example.com');
$mailman->put_SmtpPort(465);
$mailman->put_SmtpSsl(true);
$mailman->put_SmtpUsername('user@example.com');
$mailman->put_SmtpPassword('myPassword');

//  Load the client certificate directly from a PFX file.
$success = $mailman->SetSslClientCertPfx('qa_data/certs/client.pfx','pfx_password');
if ($success == false) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

$success = $mailman->VerifySmtpLogin();
if ($success == false) {
    print $mailman->lastErrorText() . "\n";
    exit;
}

print 'Connected using a PFX TLS client certificate.' . "\n";

//  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
//  relative to the current working directory of the running application.

?>