CkPython

Add a PFX Source to MailMan from BinData

Demonstrates the Chilkat MailMan.AddPfxSourceBd method, which adds a PFX/PKCS#12 certificate store to the MailMan object's internal list of sources used for locating certificates and private keys. The first argument is a BinData containing the PFX bytes and the second is the PFX password. This example loads a PFX into a BinData, registers it, and fetches a message Chilkat can decrypt.

Background: This is the in-memory (BinData) counterpart to AddPfxSourceFile. It is the right choice when the PFX bytes come from somewhere other than a file — a database, a secrets manager, or an HTTPS download — letting you supply the certificate and private key without first writing sensitive key material to disk.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

#  Demonstrates the MailMan.AddPfxSourceBd method, which adds a PFX/PKCS#12 certificate store
#  to the MailMan object's internal list of sources used for locating certificates and
#  private keys.  The 1st argument is a BinData containing the PFX bytes and the 2nd is the
#  PFX password.

mailman = chilkat.CkMailMan()

#  Configure the POP3 server connection.
mailman.put_MailHost("pop.example.com")
mailman.put_MailPort(995)
mailman.put_PopSsl(True)
mailman.put_PopUsername("user@example.com")
mailman.put_PopPassword("myPassword")

#  Load the PFX bytes into a BinData (they could come from a file, database, or secrets store).
bdPfx = chilkat.CkBinData()
success = bdPfx.LoadFile("qa_data/certs/decryption.pfx")
if (success == False):
    print(bdPfx.lastErrorText())
    sys.exit()

#  Add the PFX as a source of certificates and private keys.
success = mailman.AddPfxSourceBd(bdPfx,"pfx_password")
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

#  Fetch a message; if it is encrypted, Chilkat can decrypt it using the PFX source.
email = chilkat.CkEmail()
success = mailman.FetchOne(False,0,1,email)
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

print("Decrypted = " + str(email.get_Decrypted()))

#  Note: The path "qa_data/certs/decryption.pfx" is a relative local filesystem path,
#  relative to the current working directory of the running application.

#  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
#  connects and authenticates -- using the property settings above -- whenever a server
#  operation requires it.  Calling the explicit connect/authenticate methods can still be
#  helpful to determine whether a failure occurs while connecting or while authenticating.