Verify DomainKey-Signature Headers in Downloaded Email

require 'chilkat'

success = false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

imap = Chilkat::CkImap.new()

# Connect to an IMAP server, login, select mailbox..
# Use TLS 
imap.put_Ssl(true)
imap.put_Port(993)
success = imap.Connect("imap.example.com")
if (success == true)
    success = imap.Login("myLogin","myPassword")
    if (success == true)
        success = imap.SelectMailbox("Inbox")
    end

end

if (success != true)
    print imap.lastErrorText() + "\n";
    exit
end

# Note: DKIM-Signatures are much more common than DomainKey-Signature
# See DKIM-Signature Verify Sample.

dkim = Chilkat::CkDkim.new()

# Download a max of 10 emails and verify any DomainKey-Signature headers
# that are present.

# Download emails by sequence numbers (not UIDs).
bUid = false

n = imap.get_NumMessages()
if (n > 50)
    n = 50
end

json = Chilkat::CkJsonObject.new()
json.put_EmitCompact(false)

# To verify DomainKey-Signature headers, we need the exact unmodified MIME bytes of each email.
mimeData = Chilkat::CkBinData.new()
seqNum = 1
while seqNum <= n
    # The FetchSingleBd method was introduced in v9.5.0.76
    success = imap.FetchSingleBd(seqNum,bUid,mimeData)
    if (success != true)
        print imap.lastErrorText() + "\n";
        exit
    end

    # Note: DKIM-Signatures are much more common than DomainKey-Signature
    # See DKIM-Signature Verify Sample.

    # Get the number of DomainKey-Signature headers.
    numSigs = dkim.NumDomainKeySigs(mimeData)

    # Verify each..
    j = 0
    while j < numSigs
        print "------ DomainKey Signature " + j.to_s() + "\n";

        success = dkim.DomainKeyVerify(j,mimeData)
        if (success != true)
            print "Not valid." + "\n";
            print dkim.lastErrorText() + "\n";
        else
            print "valid." + "\n";
        end

        # Show the additional information about the signature verification
        json.Load(dkim.verifyInfo())
        print json.emit() + "\n";

        # The JSON contains information such as this:

        # 	{
        # 	  "domain": "amazonses.com",
        # 	  "selector": "7v7vs6w47njt4pimodk5mmttbegzsi6n",
        # 	  "publicKey": "MIGfMA0GCSqG...v2GvWPqGHz6uqeQIDAQAB",
        # 	  "canonicalization": "relaxed/simple",
        # 	  "algorithm": "rsa-sha256",
        # 	  "signedHeaders": "Subject:From:To:Date:Mime-Version:Content-Type:References:Message-Id:Feedback-ID",
        # 	  "verified": "yes"
        # 	}

        j = j + 1
    end
    seqNum = seqNum + 1
end

success = imap.Disconnect()