Zig

Add a PFX Source (BinData) for S/MIME Decryption

Demonstrates the Chilkat Imap.AddPfxSourceBd method, which adds PFX data held in a BinData as a source of certificates and private keys for S/MIME processing. The first argument is the BinData and the second is the PFX password. Call it once for each additional source.

Note: The certificate path is relative to the application's current working directory. Supply the path to your own certificate file.

Background: When downloading encrypted (S/MIME) email, Chilkat needs the recipient's private key to decrypt it. Adding one or more PFX sources gives Chilkat a pool of keys to search; the matching key is used automatically as messages are fetched. The BinData form is handy when the PFX comes from memory — a database blob or a downloaded buffer — rather than a file on disk. On Windows and macOS the system certificate stores are also searched automatically.

Chilkat Zig Downloads

Download Chilkat for Zig

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // Demonstrates the Imap.AddPfxSourceBd method, which adds PFX data (from a BinData) as a
    // source of certificates and private keys for S/MIME decryption.  The 1st argument is the
    // BinData containing the PFX, and the 2nd is the PFX password.

    const imap = try chilkat.Imap.init();
    defer imap.deinit();

    imap.setSsl(true);
    imap.setPort(993);

    imap.connect("imap.example.com") catch {
        std.debug.print("{s}\n", .{try imap.getLastErrorText(alloc)});
        return;
    };

    imap.login("user@example.com", "myPassword") catch {
        std.debug.print("{s}\n", .{try imap.getLastErrorText(alloc)});
        return;
    };

    // Load the PFX data into a BinData.
    const bd_pfx = try chilkat.BinData.init();
    defer bd_pfx.deinit();
    bd_pfx.loadFile("qa_data/smime.pfx") catch {
        std.debug.print("{s}\n", .{try bd_pfx.getLastErrorText(alloc)});
        return;
    };

    // The PFX password is not hard-coded in source.  Insert code here to obtain it from an
    // interactive prompt, environment variable, or a secrets vault.
    const pfx_password: [:0]const u8 = "";

    // Add the PFX as a source for S/MIME certificates and private keys.  Call once per source.
    imap.addPfxSourceBd(bd_pfx, pfx_password) catch {
        std.debug.print("{s}\n", .{try imap.getLastErrorText(alloc)});
        return;
    };

    // Messages downloaded after this are automatically decrypted when a matching key is found.

    imap.disconnect() catch {
        std.debug.print("{s}\n", .{try imap.getLastErrorText(alloc)});
        return;
    };
}