Tcl

Provide a Certificate Vault to an Email

Demonstrates the Chilkat Email.UseCertVault method, which adds an XML certificate vault to the email's internal certificate and private-key lookup sources for encryption, decryption, signing, and verification. This example builds a vault from a PFX and attaches it to the email.

Background: A certificate vault is a portable, in-memory store of certificates and private keys. Instead of wiring up each certificate individually for every operation, you load your credentials into one XmlCertVault and hand it to the email; Chilkat then draws on it automatically whenever it needs a key — to decrypt an incoming message, sign an outgoing one, or verify a signature. This is especially convenient on platforms without an OS certificate store.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the UseCertVault method, which adds an XML certificate vault to the email's
#  internal certificate and private-key lookup sources for encryption, decryption, signing,
#  and verification.

set email [new_CkEmail]

#  Build a certificate vault from a PFX (certificate + private key).
set vault [new_CkXmlCertVault]

set success [CkXmlCertVault_AddPfxFile $vault "qa_data/certs/certs.pfx" "pfx_password"]
if {$success == 0} then {
    puts [CkXmlCertVault_lastErrorText $vault]
    delete_CkEmail $email
    delete_CkXmlCertVault $vault
    exit
}

#  Make the vault available to the email object for crypto operations.
set success [CkEmail_UseCertVault $email $vault]
if {$success == 0} then {
    puts [CkEmail_lastErrorText $email]
    delete_CkEmail $email
    delete_CkXmlCertVault $vault
    exit
}

puts "Certificate vault attached to the email."

#  Note: The path "qa_data/certs/certs.pfx" is a relative local filesystem path,
#  relative to the current working directory of the running application.

delete_CkEmail $email
delete_CkXmlCertVault $vault