CkPython

Set an IMAP TLS Client Certificate from PEM

Demonstrates the Chilkat Imap.SetSslClientCertPem method, which supplies a TLS client certificate and private key from PEM. The first argument may be the PEM text itself or a path to a PEM file (Chilkat detects which), and the second is the password used when the private key is encrypted. Call it before connecting.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: PEM is the Base64 text format (delimited by -----BEGIN----- lines) commonly produced by OpenSSL and used across Unix tooling. This method is the convenient choice when your client certificate and key already live in a .pem file; use SetSslClientCertPfx for a PKCS #12 .pfx/.p12 bundle instead.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

#  Demonstrates the Imap.SetSslClientCertPem method, which supplies a TLS client certificate
#  and private key from PEM.  The 1st argument is the PEM text or a PEM file path, and the 2nd
#  is the password when the private key is encrypted.  It must be called before connecting.

imap = chilkat.CkImap()

imap.put_Ssl(True)
imap.put_Port(993)

#  The PEM private-key password is not hard-coded in source.  Insert code here to obtain it from an
#  interactive prompt, environment variable, or a secrets vault.

#  Provide the PEM client certificate BEFORE connecting.  The first argument may be a PEM file
#  path or the PEM text itself.
success = imap.SetSslClientCertPem("qa_data/client.pem",pemPassword)
if (success == False):
    print(imap.lastErrorText())
    sys.exit()

success = imap.Connect("imap.example.com")
if (success == False):
    print(imap.lastErrorText())
    sys.exit()

success = imap.Login("user@example.com","myPassword")
if (success == False):
    print(imap.lastErrorText())
    sys.exit()

success = imap.Disconnect()
if (success == False):
    print(imap.lastErrorText())
    sys.exit()