Xbase++

Set Cert and Private Key for S/MIME Decryption

Demonstrates the Chilkat Imap.SetDecryptCert2 method, which specifies a certificate together with a separately supplied private key for decrypting S/MIME messages. The first argument is the Cert and the second is the PrivateKey. This example loads the certificate and key from separate files.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: Sometimes the certificate (the public part) and the private key are stored separately — a .cer alongside a PEM key file, for instance. This method pairs them explicitly, whereas SetDecryptCert expects a single Cert that already provides its private key. After the pairing, subsequently downloaded S/MIME messages are decrypted automatically.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oImap
LOCAL oCert
LOCAL oPrivKey

nSuccess := 0

//  Demonstrates the Imap.SetDecryptCert2 method, which specifies a certificate together with a
//  separately supplied private key for decrypting S/MIME messages.  The 1st argument is the
//  Cert and the 2nd is the PrivateKey.

oImap := CreateObject("Chilkat.Imap")

oImap:Ssl := 1
oImap:Port := 993

nSuccess := oImap:Connect("imap.example.com")
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    RETURN
ENDIF

nSuccess := oImap:Login("user@example.com", "myPassword")
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    RETURN
ENDIF

//  Load the certificate and its private key from separate files.
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadFromFile("qa_data/smime.cer")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oImap:destroy()
    oCert:destroy()
    RETURN
ENDIF

oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oPrivKey:LoadPemFile("qa_data/smime_privkey.pem")
IF (nSuccess == 0)
    ? oPrivKey:LastErrorText
    oImap:destroy()
    oCert:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

//  Use the cert and key to automatically decrypt subsequently downloaded S/MIME messages.
nSuccess := oImap:SetDecryptCert2(oCert, oPrivKey)
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    oCert:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

nSuccess := oImap:Disconnect()
IF (nSuccess == 0)
    ? oImap:LastErrorText
    oImap:destroy()
    oCert:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

oImap:destroy()
oCert:destroy()
oPrivKey:destroy()