(Tcl) POP3 Read S/MIME Encrypted Email

Read S/MIME encrypted email.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# The mailman object is used for receiving (POP3) 
# and sending (SMTP) email.
set mailman [new_CkMailMan]

# Set the POP3 server's hostname
CkMailMan_put_MailHost $mailman "pop.someMailServer.com"

# Set the POP3 login/password.
CkMailMan_put_PopUsername $mailman "myLogin"
CkMailMan_put_PopPassword $mailman "myPassword"

# If running on Microsoft Windows, the Chilkat mailman
# will automatically search the registry-based certificate stores
# for matching certificates and private keys required for
# decryption.  However, on Linux, MAX OS X, and other
# operating systems, no such thing exists.  Therefore, you'll 
# need to specify one or more PFX (.p12 / .pfx) files as
# sources for locating the certs required for decyrption.
set success [CkMailMan_AddPfxSourceFile $mailman "/pfxFiles/certs_and_keys_1.pfx" "pfxPassword1"]
if {$success != 1} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    exit
}

set success [CkMailMan_AddPfxSourceFile $mailman "/pfxFiles/certs_and_keys_2.pfx" "pfxPassword2"]
if {$success != 1} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    exit
}

# ...
# Note: On MS Windows, it is not required to provide PFX sources
# if the needed certs and private keys are already installed
# on the system (in the registry-based certificate stores).

# Copy the all email from the user's POP3 mailbox 
# into a bundle object.  The email remains on the server.
# bundle is a CkEmailBundle
set bundle [CkMailMan_CopyMail $mailman]
if {[CkMailMan_get_LastMethodSuccess $mailman] == 0} then {
    puts [CkMailMan_lastErrorText $mailman]
    delete_CkMailMan $mailman
    exit
}

# S/MIME security envelopes are automatically "unwrapped" 
# when a message is retrieved from the server. Signed emails are automatically verified, and 
# encrypted emails are automatically decrypted, restoring the email to the original state before 
# signing and/or encrypting. Information about the signing and encrypting certificates can be 
# retrieved from the Email object (methods: GetSignedByCert, GetEncryptedByCert; 
# properties: SignedBy, EncryptedBy, SignaturesValid, Decrypted, ReceivedSigned, 
# ReceivedEncrypted).

# Loop over the bundle, 
set i 0
while {$i < [CkEmailBundle_get_MessageCount $bundle]} {
    # email is a CkEmail

    set email [CkEmailBundle_GetEmail $bundle $i]

    puts [CkEmail_from $email]
    puts [CkEmail_subject $email]

    # At this point, if the email was signed and/or encrypted, it is already "unwrapped", i.e.
    # the email is already decrypted and in a state as if it were never signed or encrypted.
    # You may check to see if the email was received encrypted or signed, and if so,
    # whether it was successfully unwrapped and who signed or encrypted it:
    if {[CkEmail_get_ReceivedEncrypted $email] == 1} then {

        puts "This email was encrypted when received."
        if {[CkEmail_get_Decrypted $email] == 1} then {
            puts "This email was successfully decrypted.  It was encrypted by:"
            puts [CkEmail_encryptedBy $email]
        }         else {
            puts "This email was not decrypted."
        }

    }

    if {[CkEmail_get_ReceivedSigned $email] == 1} then {

        puts "This email was signed when received."
        if {[CkEmail_get_SignaturesValid $email] == 1} then {
            puts "The signature was verified.  It was signed by:"
            puts [CkEmail_signedBy $email]
        }         else {
            puts "The signature verification failed."
        }

    }

    # The email's body, HTML body, attachments, etc.
    # are decrypted and available just like any non-encrypted email.

    puts "--"
    delete_CkEmail $email

    set i [expr $i + 1]
}

delete_CkEmailBundle $bundle


delete_CkMailMan $mailman