CkPython

Use a PEM TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPem method, which sets the client-side certificate for SSL/TLS connections, loading it from PEM data or from a PEM file. The first argument may contain the PEM text itself or a path to a PEM file; the second is the PEM password. This example loads the client certificate from a PEM file.

Background: PEM is the familiar Base64 text format bracketed by -----BEGIN CERTIFICATE----- lines, and a single PEM can hold both a certificate and its (optionally encrypted) private key. It is the common format in Unix/OpenSSL environments, whereas PFX is more typical on Windows. Because this method accepts either the PEM text or a filename, you can supply credentials straight from a config value or secret store without writing them to disk.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

#  Demonstrates the MailMan.SetSslClientCertPem method, which sets the client-side
#  certificate for SSL/TLS connections, loading it from PEM data or from a PEM file.  The
#  1st argument may contain PEM text or a PEM file path; the 2nd is the PEM password.

mailman = chilkat.CkMailMan()

#  Configure the SMTP server connection.
mailman.put_SmtpHost("smtp.example.com")
mailman.put_SmtpPort(465)
mailman.put_SmtpSsl(True)
mailman.put_SmtpUsername("user@example.com")
mailman.put_SmtpPassword("myPassword")

#  Load the client certificate from a PEM file.
success = mailman.SetSslClientCertPem("qa_data/certs/client.pem","pem_password")
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

success = mailman.VerifySmtpLogin()
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

print("Connected using a PEM TLS client certificate.")

#  Note: The path "qa_data/certs/client.pem" is a relative local filesystem path,
#  relative to the current working directory of the running application.