Xbase++

Set the Certificate for Decrypting S/MIME Email

Demonstrates the Chilkat Imap.SetDecryptCert method, which specifies the certificate used to decrypt S/MIME messages downloaded by this Imap object. The only argument is a Cert that has access to its private key. This example loads the certificate from a PFX file.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: An S/MIME-encrypted message can only be read with the recipient's private key. Once a decrypt certificate is set, Chilkat decrypts matching messages automatically as they are fetched, so your code works with plaintext Email objects. Use SetDecryptCert2 instead when the certificate object does not itself carry the private key.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oImap
LOCAL cPfxPassword
LOCAL oCert

nSuccess := 0

//  Demonstrates the Imap.SetDecryptCert method, which specifies the certificate used to decrypt
//  S/MIME messages downloaded by this Imap object.  The only argument is a Cert that has access
//  to its private key.

oImap := CreateObject("Chilkat.Imap")

oImap:Ssl := 1
oImap:Port := 993

nSuccess := oImap:Connect("imap.example.com")
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    RETURN
ENDIF

nSuccess := oImap:Login("user@example.com", "myPassword")
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    RETURN
ENDIF

//  The PFX password is not hard-coded in source.  Insert code here to obtain it from an
//  interactive prompt, environment variable, or a secrets vault.

//  Load a certificate (with private key) from a PFX file.
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/smime.pfx", cPfxPassword)
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oImap:destroy()
    oCert:destroy()
    RETURN
ENDIF

//  Use it to automatically decrypt S/MIME messages that are subsequently downloaded.
nSuccess := oImap:SetDecryptCert(oCert)
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    oCert:destroy()
    RETURN
ENDIF

nSuccess := oImap:Disconnect()
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    oCert:destroy()
    RETURN
ENDIF

oImap:destroy()
oCert:destroy()