CkPython

Add a PFX Source from BinData

Demonstrates the Chilkat Email.AddPfxSourceBd method, which adds PFX data held in a BinData object to the list of certificate and private-key sources used during decryption or signing. The second argument is the PFX password. Call it before obtaining the encrypted email so Chilkat can decrypt it automatically. This example loads a PFX into a BinData, adds it, and then loads an encrypted email.

Background: This is the in-memory (BinData) counterpart to AddPfxSourceFile. It is the right choice when the PFX bytes come from somewhere other than a file — a database, a secrets manager, or an HTTP download — letting you supply the certificate and private key without first writing them to disk (which is preferable for sensitive key material).

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

#  Demonstrates the AddPfxSourceBd method, which adds PFX data (held in a BinData) to the
#  list of certificate and private-key sources used during decryption or signing.  The
#  second argument is the PFX password.  Call it before obtaining the encrypted email.

email = chilkat.CkEmail()

#  Load PFX data into a BinData object.
bdPfx = chilkat.CkBinData()
success = bdPfx.LoadFile("qa_data/certs/decryption.pfx")
if (success == False):
    print(bdPfx.lastErrorText())
    sys.exit()

#  Add the PFX as a source of the certificate + private key.
success = email.AddPfxSourceBd(bdPfx,"pfx_password")
if (success == False):
    print(email.lastErrorText())
    sys.exit()

#  Load an encrypted email; Chilkat decrypts it using the PFX source.
success = email.LoadEml("qa_data/eml/encrypted.eml")
if (success == False):
    print(email.lastErrorText())
    sys.exit()

print("Decrypted = " + str(email.get_Decrypted()))

#  Note: Paths such as "qa_data/..." are relative local filesystem paths,
#  relative to the current working directory of the running application.