(CkPython) IMAP Download and Verify Signed MIME

Downloads the unmodified MIME of a digitally signed email, saves the .p7s signature (and other MIME parts), then loads the email into a Chilkat email object (which unwraps the S/MIME and verifies the signature) and then saves attachments (if the MIME parts were not already saved).

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

imap = chilkat.CkImap()

# Connect to an IMAP server.
# Use TLS
imap.put_Ssl(True)
imap.put_Port(993)
success = imap.Connect("imap.someMailServer.com")
if (success != True):
    print(imap.lastErrorText())
    sys.exit()

success = imap.Login("myLogin","myPassword")
if (success != True):
    print(imap.lastErrorText())
    sys.exit()

# Select an IMAP mailbox
success = imap.SelectMailbox("Inbox")
if (success != True):
    print(imap.lastErrorText())
    sys.exit()

# Download the 1st email (as MIME) in the Inbox by sequence number.
sbMime = chilkat.CkStringBuilder()
success = imap.FetchSingleAsMimeSb(1,False,sbMime)
if (success != True):
    print(imap.lastErrorText())
    sys.exit()

# Load it into a MIME object and check to see if it is signed
mime = chilkat.CkMime()
mime.LoadMimeSb(sbMime)
alreadySavedParts = False
if (mime.ContainsSignedParts() == True):

    # This will save the .p7s and other parts...
    # sa is a CkStringArray
    sa = mime.ExtractPartsToFiles("qa_output")
    if (mime.get_LastMethodSuccess() == True):
        numFiles = sa.get_Count()
        i = 0
        while i < numFiles :
            print("Created: " + sa.getString(i))
            i = i + 1

        alreadySavedParts = True

# Load the MIME into an Email object.  This unwraps the security layers and verifies signatures.
email = chilkat.CkEmail()
email.SetFromMimeSb(sbMime)

if (email.get_ReceivedSigned() == True):

    print("This email was signed.")

    # Check to see if the signatures were verified.
    if (email.get_SignaturesValid() == True):
        print("Digital signature(s) verified.")

        print("Signer: " + email.signedBy())

        # The certificate used for signing may be obtained
        # by calling email.GetSignedByCert.
        # cert is a CkCert
        cert = email.GetSignedByCert()
        if (email.get_LastMethodSuccess() != True):
            print("Failed to get signing certificate object.")
        else:
            print("Signing cert: " + cert.subjectCN())

else:
    print("Digital signature verification failed.")

if (alreadySavedParts != True):
    email.SaveAllAttachments("qa_output")