Xbase++

Use a PEM TLS Client Certificate

Demonstrates the Chilkat MailMan.SetSslClientCertPem method, which sets the client-side certificate for SSL/TLS connections, loading it from PEM data or from a PEM file. The first argument may contain the PEM text itself or a path to a PEM file; the second is the PEM password. This example loads the client certificate from a PEM file.

Background: PEM is the familiar Base64 text format bracketed by -----BEGIN CERTIFICATE----- lines, and a single PEM can hold both a certificate and its (optionally encrypted) private key. It is the common format in Unix/OpenSSL environments, whereas PFX is more typical on Windows. Because this method accepts either the PEM text or a filename, you can supply credentials straight from a config value or secret store without writing them to disk.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oMailman

nSuccess := 0

//  Demonstrates the MailMan.SetSslClientCertPem method, which sets the client-side
//  certificate for SSL/TLS connections, loading it from PEM data or from a PEM file.  The
//  1st argument may contain PEM text or a PEM file path; the 2nd is the PEM password.

oMailman := CreateObject("Chilkat.MailMan")

//  Configure the SMTP server connection.
oMailman:SmtpHost := "smtp.example.com"
oMailman:SmtpPort := 465
oMailman:SmtpSsl := 1
oMailman:SmtpUsername := "user@example.com"
oMailman:SmtpPassword := "myPassword"

//  Load the client certificate from a PEM file.
nSuccess := oMailman:SetSslClientCertPem("qa_data/certs/client.pem", "pem_password")
IF (nSuccess == 0)
    ? oMailman:LastErrorText
    oMailman:destroy()
    RETURN
ENDIF

nSuccess := oMailman:VerifySmtpLogin()
IF (nSuccess == 0)
    ? oMailman:LastErrorText
    oMailman:destroy()
    RETURN
ENDIF

? "Connected using a PEM TLS client certificate."

//  Note: The path "qa_data/certs/client.pem" is a relative local filesystem path,
//  relative to the current working directory of the running application.

oMailman:destroy()