Tcl

Use a PFX TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPfx method, which sets the client-side certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file. The first argument is the path to the PFX file and the second is its password. This example loads a client certificate directly from a PFX.

Background: This is the convenience form of SetSslClientCert: rather than loading a Cert object first, you point straight at the PFX file and password. A PFX (PKCS#12) bundles the certificate with its private key — exactly what mutual TLS requires, since the client must prove possession of the key during the handshake. It is the usual client-credential format on Windows.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the MailMan.SetSslClientCertPfx method, which sets the client-side
#  certificate for SSL/TLS connections, loading it from a PFX/PKCS#12 file.  The 1st argument
#  is the PFX path and the 2nd is the PFX password.

set mailman [new_CkMailMan]

#  Configure the SMTP server connection.
CkMailMan_put_SmtpHost $mailman "smtp.example.com"
CkMailMan_put_SmtpPort $mailman 465
CkMailMan_put_SmtpSsl $mailman 1
CkMailMan_put_SmtpUsername $mailman "user@example.com"
CkMailMan_put_SmtpPassword $mailman "myPassword"

#  Load the client certificate directly from a PFX file.
set success [CkMailMan_SetSslClientCertPfx $mailman "qa_data/certs/client.pfx" "pfx_password"]
if {$success == 0} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    exit
}

set success [CkMailMan_VerifySmtpLogin $mailman]
if {$success == 0} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    exit
}

puts "Connected using a PFX TLS client certificate."

#  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
#  relative to the current working directory of the running application.

delete_CkMailMan $mailman