Tcl

Provide a Certificate Vault to MailMan

Demonstrates the Chilkat MailMan.UseCertVault method, which provides an XML certificate vault to be searched for certificates and private keys when MailMan performs operations such as encryption, decryption, signing, or signature verification. This example builds a vault from a PFX, attaches it, and fetches a message that Chilkat can decrypt using the vault.

Background: A certificate vault is a portable, in-memory store of certificates and private keys. Rather than wiring up a specific certificate for each operation, you load your credentials into one XmlCertVault and hand it to MailMan, which then searches it automatically whenever a key is needed. This is especially useful on platforms without an OS certificate store, or when one application handles several identities.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the MailMan.UseCertVault method, which provides an XML certificate vault to
#  be searched for certificates and private keys when MailMan performs operations such as
#  encryption, decryption, signing, or signature verification.

set mailman [new_CkMailMan]

#  Configure the POP3 server connection.
CkMailMan_put_MailHost $mailman "pop.example.com"
CkMailMan_put_MailPort $mailman 995
CkMailMan_put_PopSsl $mailman 1
CkMailMan_put_PopUsername $mailman "user@example.com"
CkMailMan_put_PopPassword $mailman "myPassword"

#  Build a certificate vault from a PFX (certificate + private key).
set vault [new_CkXmlCertVault]

set success [CkXmlCertVault_AddPfxFile $vault "qa_data/certs/certs.pfx" "pfx_password"]
if {$success == 0} then {
    puts [CkXmlCertVault_lastErrorText $vault]
    delete_CkMailMan $mailman
    delete_CkXmlCertVault $vault
    exit
}

#  Make the vault available to MailMan for crypto operations.
set success [CkMailMan_UseCertVault $mailman $vault]
if {$success == 0} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    delete_CkXmlCertVault $vault
    exit
}

#  Fetch a message; Chilkat draws on the vault if a private key is needed to decrypt it.
set email [new_CkEmail]

set success [CkMailMan_FetchOne $mailman 0 0 1 $email]
if {$success == 0} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    delete_CkXmlCertVault $vault
    delete_CkEmail $email
    exit
}

puts "Decrypted = [CkEmail_get_Decrypted $email]"

#  Note: The path "qa_data/certs/certs.pfx" is a relative local filesystem path,
#  relative to the current working directory of the running application.

#  Note: Explicitly connecting/authenticating is optional.  Chilkat MailMan automatically
#  connects and authenticates -- using the property settings above -- whenever a server
#  operation requires it.  Calling the explicit connect/authenticate methods can still be
#  helpful to determine whether a failure occurs while connecting or while authenticating.

delete_CkMailMan $mailman
delete_CkXmlCertVault $vault
delete_CkEmail $email