Tcl

Add a PFX Source from BinData

Demonstrates the Chilkat Email.AddPfxSourceBd method, which adds PFX data held in a BinData object to the list of certificate and private-key sources used during decryption or signing. The second argument is the PFX password. Call it before obtaining the encrypted email so Chilkat can decrypt it automatically. This example loads a PFX into a BinData, adds it, and then loads an encrypted email.

Background: This is the in-memory (BinData) counterpart to AddPfxSourceFile. It is the right choice when the PFX bytes come from somewhere other than a file — a database, a secrets manager, or an HTTP download — letting you supply the certificate and private key without first writing them to disk (which is preferable for sensitive key material).

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the AddPfxSourceBd method, which adds PFX data (held in a BinData) to the
#  list of certificate and private-key sources used during decryption or signing.  The
#  second argument is the PFX password.  Call it before obtaining the encrypted email.

set email [new_CkEmail]

#  Load PFX data into a BinData object.
set bdPfx [new_CkBinData]

set success [CkBinData_LoadFile $bdPfx "qa_data/certs/decryption.pfx"]
if {$success == 0} then {
    puts [CkBinData_lastErrorText $bdPfx]
    delete_CkEmail $email
    delete_CkBinData $bdPfx
    exit
}

#  Add the PFX as a source of the certificate + private key.
set success [CkEmail_AddPfxSourceBd $email $bdPfx "pfx_password"]
if {$success == 0} then {
    puts [CkEmail_lastErrorText $email]
    delete_CkEmail $email
    delete_CkBinData $bdPfx
    exit
}

#  Load an encrypted email; Chilkat decrypts it using the PFX source.
set success [CkEmail_LoadEml $email "qa_data/eml/encrypted.eml"]
if {$success == 0} then {
    puts [CkEmail_lastErrorText $email]
    delete_CkEmail $email
    delete_CkBinData $bdPfx
    exit
}

puts "Decrypted = [CkEmail_get_Decrypted $email]"

#  Note: Paths such as "qa_data/..." are relative local filesystem paths,
#  relative to the current working directory of the running application.

delete_CkEmail $email
delete_CkBinData $bdPfx