Xbase++

Get the Signer Certificate of a Signed Email

Demonstrates the Chilkat Email.LastSignerCert method, which copies the certificate for the signer at a given zero-based index into a Cert object. Most signed emails have one signer (index 0), but a message can have more than one. This example loads a signed email and reads the first signer's common name.

Background: Confirming that a signature is valid (see SignaturesValid) tells you the content wasn't altered, but not who signed it. LastSignerCert gives you the signer's certificate as an object so you can examine its subject and issuer and evaluate trust — an essential step before relying on a signature to establish the sender's identity.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oEmail
LOCAL oCert

nSuccess := 0

//  Demonstrates the LastSignerCert method, which copies the certificate for the signer at
//  the given zero-based index into a Cert object.  Most signed emails have one signer
//  (index 0), but a message can have more than one.

oEmail := CreateObject("Chilkat.Email")

nSuccess := oEmail:LoadEml("qa_data/eml/signed.eml")
IF (nSuccess == 0)
    ? oEmail:LastErrorText
    oEmail:destroy()
    RETURN
ENDIF

IF (oEmail:ReceivedSigned == 1)
    //  Get the certificate of the first signer (index 0).
    oCert := CreateObject("Chilkat.Cert")
    nSuccess := oEmail:LastSignerCert(0, oCert)
    IF (nSuccess == 1)
        ? "Signer certificate (CN): " + oCert:SubjectCN
    ENDIF

ENDIF

//  Note: The path "qa_data/..." is a relative local filesystem path,
//  relative to the current working directory of the running application.

oEmail:destroy()
oCert:destroy()