(Tcl) IMAP Download and Verify Signed MIME

Downloads the unmodified MIME of a digitally signed email, saves the .p7s signature (and other MIME parts), then loads the email into a Chilkat email object (which unwraps the S/MIME and verifies the signature) and then saves attachments (if the MIME parts were not already saved).

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set imap [new_CkImap]

# Connect to an IMAP server.
# Use TLS
CkImap_put_Ssl $imap 1
CkImap_put_Port $imap 993
set success [CkImap_Connect $imap "imap.someMailServer.com"]
if {$success != 1} then {
    puts [CkImap_lastErrorText $imap]
    delete_CkImap $imap
    exit
}

set success [CkImap_Login $imap "myLogin" "myPassword"]
if {$success != 1} then {
    puts [CkImap_lastErrorText $imap]
    delete_CkImap $imap
    exit
}

# Select an IMAP mailbox
set success [CkImap_SelectMailbox $imap "Inbox"]
if {$success != 1} then {
    puts [CkImap_lastErrorText $imap]
    delete_CkImap $imap
    exit
}

# Download the 1st email (as MIME) in the Inbox by sequence number.
set sbMime [new_CkStringBuilder]

set success [CkImap_FetchSingleAsMimeSb $imap 1 0 $sbMime]
if {$success != 1} then {
    puts [CkImap_lastErrorText $imap]
    delete_CkImap $imap
    delete_CkStringBuilder $sbMime
    exit
}

# Load it into a MIME object and check to see if it is signed
set mime [new_CkMime]

CkMime_LoadMimeSb $mime $sbMime
set alreadySavedParts 0
if {[CkMime_ContainsSignedParts $mime] == 1} then {

    # This will save the .p7s and other parts...
    # sa is a CkStringArray
    set sa [CkMime_ExtractPartsToFiles $mime "qa_output"]
    if {[CkMime_get_LastMethodSuccess $mime] == 1} then {
        set numFiles [CkStringArray_get_Count $sa]
        set i 0
        while {$i < $numFiles} {
            puts "Created: [CkStringArray_getString $sa $i]"
            set i [expr $i + 1]
        }
        delete_CkStringArray $sa

        set alreadySavedParts 1
    }

}

# Load the MIME into an Email object.  This unwraps the security layers and verifies signatures.
set email [new_CkEmail]

CkEmail_SetFromMimeSb $email $sbMime

if {[CkEmail_get_ReceivedSigned $email] == 1} then {

    puts "This email was signed."

    # Check to see if the signatures were verified.
    if {[CkEmail_get_SignaturesValid $email] == 1} then {
        puts "Digital signature(s) verified."

        puts "Signer: [CkEmail_signedBy $email]"

        # The certificate used for signing may be obtained
        # by calling email.GetSignedByCert.
        # cert is a CkCert
        set cert [CkEmail_GetSignedByCert $email]
        if {[CkEmail_get_LastMethodSuccess $email] != 1} then {
            puts "Failed to get signing certificate object."
        }         else {
            puts "Signing cert: [CkCert_subjectCN $cert]"
            delete_CkCert $cert

        }

    }

} else {
    puts "Digital signature verification failed."
}

if {$alreadySavedParts != 1} then {
    CkEmail_SaveAllAttachments $email "qa_output"
}


delete_CkImap $imap
delete_CkStringBuilder $sbMime
delete_CkMime $mime
delete_CkEmail $email