CkPython

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

#  Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
#  certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
#  is the PFX path and the 2nd is the PFX password.

mailman = chilkat.CkMailMan()

#  Configure the SMTP server connection.
mailman.put_SmtpHost("smtp.example.com")
mailman.put_SmtpPort(465)
mailman.put_SmtpSsl(True)
mailman.put_SmtpUsername("user@example.com")
mailman.put_SmtpPassword("myPassword")

#  Load the client certificate directly from a PFX file.
success = mailman.SetSslClientCertPfx("qa_data/certs/client.pfx","pfx_password")
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

success = mailman.VerifySmtpLogin()
if (success == False):
    print(mailman.lastErrorText())
    sys.exit()

print("Connected using a PFX TLS client certificate.")

#  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
#  relative to the current working directory of the running application.