CkPython

Encrypt MIME for Multiple Recipients

Demonstrates encrypting the current MIME entity for several recipients at once. A certificate is added for each recipient with AddEncryptCert, and EncryptN then produces a single CMS/PKCS #7 message that each recipient can independently decrypt.

The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background. When a message targets more than one recipient, each recipient's certificate is added to the internal list and EncryptN wraps the message key separately for each one. Any single recipient can then decrypt with their own private key.

Chilkat CkPython Downloads

Download Chilkat for CkPython

CkPython

import sys
import chilkat

success = False

mime = chilkat.CkMime()
success = mime.SetBodyFromPlainText("This message will be encrypted.")
if (success == False):
    print(mime.lastErrorText())
    sys.exit()

#  Add a certificate for each intended recipient.  Every recipient receives an independently
#  wrapped copy of the message key.
cert1 = chilkat.CkCert()
success = cert1.LoadFromFile("qa_data/recipient1.cer")
if (success == False):
    print(cert1.lastErrorText())
    sys.exit()

success = mime.AddEncryptCert(cert1)
if (success == False):
    print(mime.lastErrorText())
    sys.exit()

cert2 = chilkat.CkCert()
success = cert2.LoadFromFile("qa_data/recipient2.cer")
if (success == False):
    print(cert2.lastErrorText())
    sys.exit()

success = mime.AddEncryptCert(cert2)
if (success == False):
    print(mime.lastErrorText())
    sys.exit()

#  Encrypt for every added recipient at once.
success = mime.EncryptN()
if (success == False):
    print(mime.lastErrorText())
    sys.exit()

success = mime.SaveMime("qa_output/encrypted_multi.eml")
if (success == False):
    print(mime.lastErrorText())
    sys.exit()

print("Message encrypted for multiple recipients.")