DataFlex

Find Certificate by Email Address

See more Cert Store Examples

Demonstrates how to find a certificate having the specified email address either within the cert's subject email, or the RFC822 name.

In an X.509 certificate, an email address can typically be located in two places:

1. RFC822 Name (Subject Alternative Name extension) -
   • The certificate may include an email address in the Subject Alternative Name (SAN) extension under the RFC822 Name field. This is a modern and preferred method because it allows for flexibility and alignment with security best practices.
   • To find it, Chilkat inspects the SAN extension in the certificate details.
2. Subject (Common Name or Email Address attribute) -
   • Older certificates may store the email address directly in the Subject field, typically under the Email Address attribute ("emailAddress") or, less commonly, the Common Name (CN).
   • This method is less preferred in modern standards but can still be encountered in legacy implementations. Chilkat also searches here for the email address.

Note: Requires Chilkat v10.1.2 or later.

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Variant vCert
Store    Handle hoCertStore
    Boolean iReadOnly
    Variant vJson
    Handle hoJson
    String sEmail_address
    Variant vCert
    Handle hoCert
    String sTemp1

    Move False To iSuccess

    Get Create (RefClass(cComChilkatCertStore)) To hoCertStore
    If (Not(IsComObjectCreated(hoCertStore))) Begin
        Send CreateComObject of hoCertStore
    End

    // This opens the Current User certificate store on Windows,
    // On MacOS and iOS it opens the default Keychain.
    Move False To iReadOnly
    Get ComOpenCurrentUserStore Of hoCertStore iReadOnly To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Find the certificate having the specified email address in either the RFC822 Name or in the Subject.
    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Move "joe@example.com" To sEmail_address
    Get ComUpdateString Of hoJson "email" sEmail_address To iSuccess

    Get Create (RefClass(cComChilkatCert)) To hoCert
    If (Not(IsComObjectCreated(hoCert))) Begin
        Send CreateComObject of hoCert
    End
    Get pvComObject of hoJson to vJson
    Get pvComObject of hoCert to vCert
    Get ComFindCert Of hoCertStore vJson vCert To iSuccess
    If (iSuccess = True) Begin
        // Show the full distinguished name of the certificate.
        Get ComSubjectDN Of hoCert To sTemp1
        Showln "Found: " sTemp1
    End
    Else Begin
        Showln "Not found."
    End



End_Procedure