Tcl

Get the Signer Certificate of a Signed Email

Demonstrates the Chilkat Email.LastSignerCert method, which copies the certificate for the signer at a given zero-based index into a Cert object. Most signed emails have one signer (index 0), but a message can have more than one. This example loads a signed email and reads the first signer's common name.

Background: Confirming that a signature is valid (see SignaturesValid) tells you the content wasn't altered, but not who signed it. LastSignerCert gives you the signer's certificate as an object so you can examine its subject and issuer and evaluate trust — an essential step before relying on a signature to establish the sender's identity.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the LastSignerCert method, which copies the certificate for the signer at
#  the given zero-based index into a Cert object.  Most signed emails have one signer
#  (index 0), but a message can have more than one.

set email [new_CkEmail]

set success [CkEmail_LoadEml $email "qa_data/eml/signed.eml"]
if {$success == 0} then {
    puts [CkEmail_lastErrorText $email]
    delete_CkEmail $email
    exit
}

if {[CkEmail_get_ReceivedSigned $email] == 1} then {
    #  Get the certificate of the first signer (index 0).
    set cert [new_CkCert]

    set success [CkEmail_LastSignerCert $email 0 $cert]
    if {$success == 1} then {
        puts "Signer certificate (CN): [CkCert_subjectCN $cert]"
    }

}

#  Note: The path "qa_data/..." is a relative local filesystem path,
#  relative to the current working directory of the running application.

delete_CkEmail $email
delete_CkCert $cert