Delphi DLL

openssl smime -encrypt -des3 -in <file> <pem file>

See more OpenSSL Examples

OpenSSL SMIME encrypt file using PEM containing a certificate. Delphi DLL

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, BinData, StringBuilder, Cert, Pem, Crypt2;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Boolean;
pem: HCkPem;
cert: HCkCert;
crypt: HCkCrypt2;
bd: HCkBinData;
sbEncryptedMime: HCkStringBuilder;

begin
success := False;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Load the cert from a PEM file.

pem := CkPem_Create();
// Our particular PEM was not encrypted, so we pass an empty password.
// Also, a private key is not needed for encryption.  The PEM used to test this example
// happens to have a private key, but it's not actually used.
success := CkPem_LoadPemFile(pem,'qa_data/openssl/rsaCertAndKey.pem','');
if (success = False) then
  begin
    Memo1.Lines.Add(CkPem__lastErrorText(pem));
    Exit;
  end;

if (CkPem_getNumCerts(pem) = 0) then
  begin
    Memo1.Lines.Add('PEM does not contain any certificates.');
    Exit;
  end;

cert := CkPem_GetCert(pem,0);
if (CkPem_getLastMethodSuccess(pem) = False) then
  begin
    Memo1.Lines.Add(CkPem__lastErrorText(pem));
    Exit;
  end;

// -------------------------------------------------------------------------------------
// Duplicate this OpenSSL command:   openssl smime -encrypt -des3 -in <file> <pem file>
// -------------------------------------------------------------------------------------
crypt := CkCrypt2_Create();
success := CkCrypt2_SetEncryptCert(crypt,cert);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    CkCert_Dispose(cert);
    Exit;
  end;

CkCert_Dispose(cert);

CkCrypt2_putCryptAlgorithm(crypt,'PKI');
CkCrypt2_putPkcs7CryptAlg(crypt,'3des');
CkCrypt2_putKeyLength(crypt,168);

// Load the file to be encrypted.
bd := CkBinData_Create();
success := CkBinData_LoadFile(bd,'qa_data/openssl/hello.txt');
if (success = False) then
  begin
    Memo1.Lines.Add('Failed to load the input file.');
    Exit;
  end;

// Encrypt.
success := CkCrypt2_EncryptBd(crypt,bd);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

// The openssl smime -encrypt command produces encrypte MIME such as this:

// MIME-Version: 1.0
// Content-Disposition: attachment; filename="smime.p7m"
// Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name="smime.p7m"
// Content-Transfer-Encoding: base64
// 
// MIICzwYJKoZIhvcNAQcDoIICwDCCArwCAQAxggF8MIIBeAIBADBgMEoxCzAJBgNVBAYTAlVTMRYw
// FAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBY
// MwISA9Nqgb1dH/XTDNeKzN1nR85iMA0GCSqGSIb3DQEBAQUABIIBAIQqPexjxWovgxwKV/r3HL/U
// EP9Yozvz5hBeX5VvRZjKSi4FRw5wapElPK+4FB82hiAR9Mi3c16PvPSVkJv3l78Mv5uaaOs/OmUz
// mIHFB6Z+l2E52BDmUVWJZTQ09vdWy6+NIRlg2R9Z1NkmZ4BZCJk6mHB/Yx03IaOxK8LnwieDMthM
// SvxbhJnIOISN7k7ofs+/0vTXUpdQ+tlmwyVySMGQ6VMk+z4sqZJ2stacqCPtt/aiSwJ9p0OKmihf
// 3KDJceXJtavIQeA97yz1LqPvle35mmd5sBhV9qQYdTV/KJ+YM5uEZ9BHYbvMJbADFHwKzhcEY3qA
// 7T9acmEsb7NycOIwggE1BgkqhkiG9w0BBwEwFAYIKoZIhvcNAwcECERX/ZoHweSkgIIBEMmCMx49
// zjVAnGqRaBbvzQT1hg0uQSxIJjxMxC+HSuM+eY9oSOsbrw4uIijHKH9NdOpeDsdRzg2z5EBM7AlP
// Ht9DyPW5C2deV6RPX4F8gyExz+JUXrd+3Yb3AKTdpDkTWDmNCeO0r/YSqp518+mfU5hG8e336u51
// HAM44FeknA8oThWsD/wUB1e8vzsatK4UXW/KSu/166V7z+VT86kd+IHa7t60U9Yp0ZXgcM5Pb5Ni
// 69Qc5MKPzom2801H5UR/WjCgsxOIjOj49sKisjRy79skrJzxY5ZG05T0dKn6KC3TjRpIEEeOyhCd
// Nm2Y7dcW8GLMepdhWay5vePmQxmvmhbAtBprIem14NcrYeG6D5wP

// We have the body in bd
// Construct the header and base64 body...
sbEncryptedMime := CkStringBuilder_Create();

CkStringBuilder_AppendLine(sbEncryptedMime,'MIME-Version: 1.0',True);
CkStringBuilder_AppendLine(sbEncryptedMime,'Content-Disposition: attachment; filename="smime.p7m"',True);
CkStringBuilder_AppendLine(sbEncryptedMime,'Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data; name="smime.p7m"',True);
CkStringBuilder_AppendLine(sbEncryptedMime,'Content-Transfer-Encoding: base64',True);
CkStringBuilder_AppendLine(sbEncryptedMime,'',True);
CkStringBuilder_AppendLine(sbEncryptedMime,CkBinData__getEncoded(bd,'base64_mime'),True);

// Show the result.
Memo1.Lines.Add(CkStringBuilder__getAsString(sbEncryptedMime));

// or save to a file..
success := CkStringBuilder_WriteFile(sbEncryptedMime,'qa_output/encryptedMime.txt','utf-8',False);

CkPem_Dispose(pem);
CkCrypt2_Dispose(crypt);
CkBinData_Dispose(bd);
CkStringBuilder_Dispose(sbEncryptedMime);

end;