CkPython Requires Chilkat v10.1.2+

Send Signed Email using PFX File (long version)

Demonstrates how to send a signed email using a digital certificate w/ private key stored in a PFX file. CkPython

import sys
import chilkat

success = False

#  This example requires the Chilkat API to have been previously unlocked.
#  See Global Unlock Sample for sample code.

#  The mailman object is used for sending and receiving email.
mailman = chilkat.CkMailMan()

#  Set the SMTP server.
mailman.put_SmtpHost("smtp.mymailserver.com")

#  Create a new email object
email = chilkat.CkEmail()

email.put_Subject("This email is signed")
email.put_Body("This is a digitally signed mail")
email.put_From("Chilkat Admin <admin@chilkatsoft.com>")
success = email.AddTo("Chilkat Support","support@chilkatsoft.com")

#  Indicate that the email should be sent signed.
email.put_SendSigned(True)

#  Load a PFX file into a certificate store object.
#  Then locate the certificate matching the  sender's email address,
#  and use it for signing.
#  (a PFX file may contain more than one certificate.)
certStore = chilkat.CkCertStore()
#  The 1st argument is the path of the PFX file, the 2nd arg is the 
#  PFX file's password:
success = certStore.LoadPfxFile("/pfx_files/chilkatsoft_secret.pfx","secret")
if (success != True):
    print(certStore.lastErrorText())
    sys.exit()

#  Find the certificate for the email address:
jsonE = chilkat.CkJsonObject()
jsonE.UpdateString("email","admin@chilkatsoft.com")

cert = chilkat.CkCert()
success = certStore.FindCert(jsonE,cert)
if (success == False):
    print(certStore.lastErrorText())
    sys.exit()

#  Alternatively, if a PFX file is known to contain a single certificate,
#  you may load it directly into a Chilkat certificate object.
#  This snippet of source code shows how:
cert2 = chilkat.CkCert()
#  The 1st argument is the filename, the 2nd arg is the 
#  PFX file's password:
success = cert2.LoadPfxFile("/pfx_files/chilkatsoft_secret.pfx","secret")
if (success != True):
    print(cert2.lastErrorText())
    sys.exit()

#  This example will use the cert from the certStore...
success = email.SetSigningCert(cert)

#  Signed email can be sent in two different ways.  
#  In a multipart/signed email, the signature is attached as a separate MIME part.
#  In an opaque email (signedData) the content of the email is encapsulated within the signature
#  and the email is sent as "application/pkcs7-mime". 
#  Either should be fine, but some receiving systems might require one or the other..
mailman.put_OpaqueSigning(False)

#  Send a signed email.
success = mailman.SendEmail(email)
if (success != True):
    print(mailman.lastErrorText())
else:
    #  The LastErrorText property provides information
    #  even when successful.
    print(mailman.lastErrorText())
    print("Mail Sent!")