PureBasic

Set the Decryption Certificate for MailMan

Demonstrates the Chilkat MailMan.SetDecryptCert method, which explicitly specifies the certificate to use when decrypting encrypted email. The certificate must correspond to the recipient certificate used to encrypt the message and must have access to its private key. This example loads the certificate from a PFX, registers it, and fetches a message that Chilkat can then decrypt.

Background: Decrypting S/MIME mail requires the recipient's private key, so the certificate you supply must carry it — which is why a PFX (certificate + private key in one password-protected file) is used here. Chilkat can find installed certificates automatically on Windows and macOS; SetDecryptCert is how you point it at a specific one instead. If the certificate and key live in separate files, use SetDecryptCert2.

Chilkat PureBasic Downloads

Download Chilkat for PureBasic

PureBasic

IncludeFile "CkCert.pb"
IncludeFile "CkEmail.pb"
IncludeFile "CkMailMan.pb"

Procedure ChilkatExample()

    success.i = 0

    ;  Demonstrates the MailMan.SetDecryptCert method, which explicitly specifies the certificate
    ;  to use when decrypting encrypted email.  The certificate must correspond to the recipient
    ;  certificate used to encrypt the message, and must have access to its private key.

    mailman.i = CkMailMan::ckCreate()
    If mailman.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  Configure the POP3 server connection.
    CkMailMan::setCkMailHost(mailman, "pop.example.com")
    CkMailMan::setCkMailPort(mailman, 995)
    CkMailMan::setCkPopSsl(mailman, 1)
    CkMailMan::setCkPopUsername(mailman, "user@example.com")
    CkMailMan::setCkPopPassword(mailman, "myPassword")

    ;  Load the certificate together with its private key from a PFX file.
    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadPfxFile(cert,"qa_data/certs/decryption.pfx","pfx_password")
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkMailMan::ckDispose(mailman)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    ;  Specify the certificate to use when decrypting downloaded email.
    success = CkMailMan::ckSetDecryptCert(mailman,cert)
    If success = 0
        Debug CkMailMan::ckLastErrorText(mailman)
        CkMailMan::ckDispose(mailman)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    ;  Fetch a message; if it is encrypted, Chilkat decrypts it using this certificate.
    email.i = CkEmail::ckCreate()
    If email.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkMailMan::ckFetchOne(mailman,0,0,1,email)
    If success = 0
        Debug CkMailMan::ckLastErrorText(mailman)
        CkMailMan::ckDispose(mailman)
        CkCert::ckDispose(cert)
        CkEmail::ckDispose(email)
        ProcedureReturn
    EndIf

    Debug "ReceivedEncrypted = " + Str(CkEmail::ckReceivedEncrypted(email))
    Debug "Decrypted = " + Str(CkEmail::ckDecrypted(email))

    ;  Note: The path "qa_data/certs/decryption.pfx" is a relative local filesystem path,
    ;  relative to the current working directory of the running application.

    ;  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
    ;  connects and authenticates -- using the property settings above -- whenever a server
    ;  operation requires it.  Calling the explicit connect/authenticate methods can still be
    ;  helpful to determine whether a failure occurs while connecting or while authenticating.


    CkMailMan::ckDispose(mailman)
    CkCert::ckDispose(cert)
    CkEmail::ckDispose(email)


    ProcedureReturn
EndProcedure