Xbase++

Use a TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCert method, which sets the client-side certificate to use for SSL/TLS connections. This is typically not required — most SSL/TLS connections authenticate the server only. This example loads a client certificate from a PFX and uses it when connecting.

Background: In an ordinary TLS handshake only the server presents a certificate, and the client proves who it is later with a password. Mutual TLS adds a second leg: the client also presents a certificate, so it is authenticated cryptographically at the transport layer. Some corporate or high-security mail servers require this. Because the client must prove possession of the key, the certificate needs its private key — hence loading from a PFX.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oMailman
LOCAL oCert

nSuccess := 0

//  Demonstrates the MailMan.SetSslClientCert method, which sets the client-side certificate
//  to use for SSL/TLS connections.  This is typically not required -- most SSL/TLS
//  connections authenticate the server only.

oMailman := CreateObject("Chilkat.MailMan")

//  Configure the SMTP server connection.
oMailman:SmtpHost := "smtp.example.com"
oMailman:SmtpPort := 465
oMailman:SmtpSsl := 1
oMailman:SmtpUsername := "user@example.com"
oMailman:SmtpPassword := "myPassword"

//  Load the client certificate (with its private key) from a PFX file.
oCert := CreateObject("Chilkat.Cert")
nSuccess := oCert:LoadPfxFile("qa_data/certs/client.pfx", "pfx_password")
IF (nSuccess == 0)
    ? oCert:LastErrorText
    oMailman:destroy()
    oCert:destroy()
    RETURN
ENDIF

//  Use this certificate to identify the client during the TLS handshake.
nSuccess := oMailman:SetSslClientCert(oCert)
IF (nSuccess == 0)
    ? oMailman:LastErrorText
    oMailman:destroy()
    oCert:destroy()
    RETURN
ENDIF

nSuccess := oMailman:VerifySmtpLogin()
IF (nSuccess == 0)
    ? oMailman:LastErrorText
    oMailman:destroy()
    oCert:destroy()
    RETURN
ENDIF

? "Connected using a TLS client certificate."

//  Note: The path "qa_data/certs/client.pfx" is a relative local filesystem path,
//  relative to the current working directory of the running application.

oMailman:destroy()
oCert:destroy()