Verify DomainKey-Signature Headers in Downloaded Email

llSuccess = .F.

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loImap = createobject("CkImap")

// Connect to an IMAP server, login, select mailbox..
// Use TLS 
loImap.Ssl = .T.
loImap.Port = 993
llSuccess = loImap.Connect("imap.example.com")
if (llSuccess = .T.) then
    llSuccess = loImap.Login("myLogin","myPassword")
    if (llSuccess = .T.) then
        llSuccess = loImap.SelectMailbox("Inbox")
    endif

endif

if (llSuccess <> .T.) then
    ? loImap.LastErrorText
    release loImap
    return
endif

// Note: DKIM-Signatures are much more common than DomainKey-Signature
// See DKIM-Signature Verify Sample.

loDkim = createobject("CkDkim")

// Download a max of 10 emails and verify any DomainKey-Signature headers
// that are present.

// Download emails by sequence numbers (not UIDs).
llBUid = .F.

n = loImap.NumMessages
if (n > 50) then
    n = 50
endif

loJson = createobject("CkJsonObject")
loJson.EmitCompact = .F.

// To verify DomainKey-Signature headers, we need the exact unmodified MIME bytes of each email.
loMimeData = createobject("CkBinData")
lnSeqNum = 1
do while lnSeqNum <= n
    // The FetchSingleBd method was introduced in v9.5.0.76
    llSuccess = loImap.FetchSingleBd(lnSeqNum,llBUid,loMimeData)
    if (llSuccess <> .T.) then
        ? loImap.LastErrorText
        release loImap
        release loDkim
        release loJson
        release loMimeData
        return
    endif

    // Note: DKIM-Signatures are much more common than DomainKey-Signature
    // See DKIM-Signature Verify Sample.

    // Get the number of DomainKey-Signature headers.
    lnNumSigs = loDkim.NumDomainKeySigs(loMimeData)

    // Verify each..
    j = 0
    do while j < lnNumSigs
        ? "------ DomainKey Signature " + str(j)

        llSuccess = loDkim.DomainKeyVerify(j,loMimeData)
        if (llSuccess <> .T.) then
            ? "Not valid."
            ? loDkim.LastErrorText
        else
            ? "valid."
        endif

        // Show the additional information about the signature verification
        loJson.Load(loDkim.VerifyInfo)
        ? loJson.Emit()

        // The JSON contains information such as this:

        // 	{
        // 	  "domain": "amazonses.com",
        // 	  "selector": "7v7vs6w47njt4pimodk5mmttbegzsi6n",
        // 	  "publicKey": "MIGfMA0GCSqG...v2GvWPqGHz6uqeQIDAQAB",
        // 	  "canonicalization": "relaxed/simple",
        // 	  "algorithm": "rsa-sha256",
        // 	  "signedHeaders": "Subject:From:To:Date:Mime-Version:Content-Type:References:Message-Id:Feedback-ID",
        // 	  "verified": "yes"
        // 	}

        j = j + 1
    enddo
    lnSeqNum = lnSeqNum + 1
enddo

llSuccess = loImap.Disconnect()


release loImap
release loDkim
release loJson
release loMimeData