(Objective-C) IMAP Download and Verify Signed MIME

Downloads the unmodified MIME of a digitally signed email, saves the .p7s signature (and other MIME parts), then loads the email into a Chilkat email object (which unwraps the S/MIME and verifies the signature) and then saves attachments (if the MIME parts were not already saved).

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoImap.h>
#import <CkoStringBuilder.h>
#import <CkoMime.h>
#import <CkoStringArray.h>
#import <CkoEmail.h>
#import <CkoCert.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoImap *imap = [[CkoImap alloc] init];

// Connect to an IMAP server.
// Use TLS
imap.Ssl = YES;
imap.Port = [NSNumber numberWithInt:993];
BOOL success = [imap Connect: @"imap.someMailServer.com"];
if (success != YES) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

success = [imap Login: @"myLogin" password: @"myPassword"];
if (success != YES) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

// Select an IMAP mailbox
success = [imap SelectMailbox: @"Inbox"];
if (success != YES) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

// Download the 1st email (as MIME) in the Inbox by sequence number.
CkoStringBuilder *sbMime = [[CkoStringBuilder alloc] init];
success = [imap FetchSingleAsMimeSb: [NSNumber numberWithInt: 1] bUid: NO sbMime: sbMime];
if (success != YES) {
    NSLog(@"%@",imap.LastErrorText);
    return;
}

// Load it into a MIME object and check to see if it is signed
CkoMime *mime = [[CkoMime alloc] init];
[mime LoadMimeSb: sbMime];
BOOL alreadySavedParts = NO;
if ([mime ContainsSignedParts] == YES) {

    // This will save the .p7s and other parts...
    CkoStringArray *sa = [mime ExtractPartsToFiles: @"qa_output"];
    if (mime.LastMethodSuccess == YES) {
        int numFiles = [sa.Count intValue];
        int i = 0;
        while (i < numFiles) {
            NSLog(@"%@%@",@"Created: ",[sa GetString: [NSNumber numberWithInt: i]]);
            i = i + 1;
        }

        alreadySavedParts = YES;
    }

}

// Load the MIME into an Email object.  This unwraps the security layers and verifies signatures.
CkoEmail *email = [[CkoEmail alloc] init];
[email SetFromMimeSb: sbMime];

if (email.ReceivedSigned == YES) {

    NSLog(@"%@",@"This email was signed.");

    // Check to see if the signatures were verified.
    if (email.SignaturesValid == YES) {
        NSLog(@"%@",@"Digital signature(s) verified.");

        NSLog(@"%@%@",@"Signer: ",email.SignedBy);

        // The certificate used for signing may be obtained
        // by calling email.GetSignedByCert.
        CkoCert *cert = [email GetSignedByCert];
        if (email.LastMethodSuccess != YES) {
            NSLog(@"%@",@"Failed to get signing certificate object.");
        }
        else {
            NSLog(@"%@%@",@"Signing cert: ",cert.SubjectCN);

        }

    }

}
else {
    NSLog(@"%@",@"Digital signature verification failed.");
}

if (alreadySavedParts != YES) {
    [email SaveAllAttachments: @"qa_output"];
}