Verify DomainKey-Signature Headers in Downloaded Email
See more DKIM / DomainKey Examples
Downloads email from an IMAP server and verifies the DomainKey-Signature header(s) in each email, if present.
Note: DKIM-Signatures are much more common than DomainKey-Signatures. See the other Chilkat example for verifying DKIM-Signatures (link in the code below).
Chilkat Swift Downloads
func chilkatTest() {
var success: Bool = false
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
let imap = CkoImap()!
// Connect to an IMAP server, login, select mailbox..
// Use TLS
imap.ssl = true
imap.port = 993
success = imap.connect(hostname: "imap.example.com")
if success == true {
success = imap.login(login: "myLogin", password: "myPassword")
if success == true {
success = imap.selectMailbox(mailbox: "Inbox")
}
}
if success != true {
print("\(imap.lastErrorText!)")
return
}
// Note: DKIM-Signatures are much more common than DomainKey-Signature
// See DKIM-Signature Verify Sample.
let dkim = CkoDkim()!
// Download a max of 10 emails and verify any DomainKey-Signature headers
// that are present.
// Download emails by sequence numbers (not UIDs).
var bUid: Bool = false
var seqNum: Int
var j: Int
var n: Int = imap.numMessages.intValue
if n > 50 {
n = 50
}
let json = CkoJsonObject()!
json.emitCompact = false
// To verify DomainKey-Signature headers, we need the exact unmodified MIME bytes of each email.
let mimeData = CkoBinData()!
seqNum = 1
while seqNum <= n {
// The FetchSingleBd method was introduced in v9.5.0.76
success = imap.fetchSingleBd(msgId: seqNum, bUid: bUid, mimeData: mimeData)
if success != true {
print("\(imap.lastErrorText!)")
return
}
// Note: DKIM-Signatures are much more common than DomainKey-Signature
// See DKIM-Signature Verify Sample.
// Get the number of DomainKey-Signature headers.
var numSigs: Int = dkim.numDomainKeySigs(mimeData: mimeData).intValue
// Verify each..
j = 0
while j < numSigs {
print("------ DomainKey Signature \(j)")
success = dkim.domainKeyVerify(sigIndex: j, mimeData: mimeData)
if success != true {
print("Not valid.")
print("\(dkim.lastErrorText!)")
}
else {
print("valid.")
}
// Show the additional information about the signature verification
json.load(json: dkim.verifyInfo)
print("\(json.emit()!)")
// The JSON contains information such as this:
// {
// "domain": "amazonses.com",
// "selector": "7v7vs6w47njt4pimodk5mmttbegzsi6n",
// "publicKey": "MIGfMA0GCSqG...v2GvWPqGHz6uqeQIDAQAB",
// "canonicalization": "relaxed/simple",
// "algorithm": "rsa-sha256",
// "signedHeaders": "Subject:From:To:Date:Mime-Version:Content-Type:References:Message-Id:Feedback-ID",
// "verified": "yes"
// }
j = j + 1
}
seqNum = seqNum + 1
}
success = imap.disconnect()
}