(Tcl) Duplicate OpensSSL Command that Decrypts Binary DER

This example duplicates the following:

openssl smime -decrypt -in INPUT_FILE -inform der -binary -out OUTPUT_FILE -recip PEM_CERT_AND_KEY -passin pass:PRIVKEY_PASSWORD

Note: Although "smime" is the OpenSSL command, we're not really dealing with S/MIME. The arguments "-inform der -binary" indicate that the input is simply the binary DER (i.e. the PKCS7 binary encrypted object). The output can be any type of file (whatever was encrypted).

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

CkCrypt2_put_CryptAlgorithm $crypt "pki"

set pem [new_CkPem]

set success [CkPem_LoadPemFile $pem "qa_data/pem/myPem.pem" "password"]
if {$success != 1} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkCrypt2 $crypt
    delete_CkPem $pem
    exit
}

# privkey is a CkPrivateKey
set privkey [CkPem_GetPrivateKey $pem 0]
if {[CkPem_get_LastMethodSuccess $pem] != 1} then {
    puts [CkPem_lastErrorText $pem]
    delete_CkCrypt2 $crypt
    delete_CkPem $pem
    exit
}

# cert is a CkCert
set cert [CkPem_GetCert $pem 0]
if {[CkPem_get_LastMethodSuccess $pem] != 1} then {
    delete_CkPrivateKey $privkey

    puts [CkPem_lastErrorText $pem]
    delete_CkCrypt2 $crypt
    delete_CkPem $pem
    exit
}

set success [CkCrypt2_SetDecryptCert2 $crypt $cert $privkey]
if {$success != 1} then {
    delete_CkPrivateKey $privkey

    delete_CkCert $cert

    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCrypt2 $crypt
    delete_CkPem $pem
    exit
}

delete_CkPrivateKey $privkey

delete_CkCert $cert

set success [CkCrypt2_CkDecryptFile $crypt "qa_data/infile.enc" "qa_output/outfile.dat"]
if {$success != 1} then {
    puts [CkCrypt2_lastErrorText $crypt]
    delete_CkCrypt2 $crypt
    delete_CkPem $pem
    exit
}

puts "Success."

delete_CkCrypt2 $crypt
delete_CkPem $pem