Verify DomainKey-Signature Headers in Downloaded Email

#include <C_CkImapW.h>
#include <C_CkDkimW.h>
#include <C_CkJsonObjectW.h>
#include <C_CkBinDataW.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkImapW imap;
    HCkDkimW dkim;
    BOOL bUid;
    int seqNum;
    int j;
    int n;
    HCkJsonObjectW json;
    HCkBinDataW mimeData;
    int numSigs;

    success = FALSE;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    imap = CkImapW_Create();

    // Connect to an IMAP server, login, select mailbox..
    // Use TLS 
    CkImapW_putSsl(imap,TRUE);
    CkImapW_putPort(imap,993);
    success = CkImapW_Connect(imap,L"imap.example.com");
    if (success == TRUE) {
        success = CkImapW_Login(imap,L"myLogin",L"myPassword");
        if (success == TRUE) {
            success = CkImapW_SelectMailbox(imap,L"Inbox");
        }

    }

    if (success != TRUE) {
        wprintf(L"%s\n",CkImapW_lastErrorText(imap));
        CkImapW_Dispose(imap);
        return;
    }

    // Note: DKIM-Signatures are much more common than DomainKey-Signature
    // See DKIM-Signature Verify Sample.

    dkim = CkDkimW_Create();

    // Download a max of 10 emails and verify any DomainKey-Signature headers
    // that are present.

    // Download emails by sequence numbers (not UIDs).
    bUid = FALSE;

    n = CkImapW_getNumMessages(imap);
    if (n > 50) {
        n = 50;
    }

    json = CkJsonObjectW_Create();
    CkJsonObjectW_putEmitCompact(json,FALSE);

    // To verify DomainKey-Signature headers, we need the exact unmodified MIME bytes of each email.
    mimeData = CkBinDataW_Create();
    seqNum = 1;
    while (seqNum <= n) {
        // The FetchSingleBd method was introduced in v9.5.0.76
        success = CkImapW_FetchSingleBd(imap,seqNum,bUid,mimeData);
        if (success != TRUE) {
            wprintf(L"%s\n",CkImapW_lastErrorText(imap));
            CkImapW_Dispose(imap);
            CkDkimW_Dispose(dkim);
            CkJsonObjectW_Dispose(json);
            CkBinDataW_Dispose(mimeData);
            return;
        }

        // Note: DKIM-Signatures are much more common than DomainKey-Signature
        // See DKIM-Signature Verify Sample.

        // Get the number of DomainKey-Signature headers.
        numSigs = CkDkimW_NumDomainKeySigs(dkim,mimeData);

        // Verify each..
        j = 0;
        while (j < numSigs) {
            wprintf(L"------ DomainKey Signature %d\n",j);

            success = CkDkimW_DomainKeyVerify(dkim,j,mimeData);
            if (success != TRUE) {
                wprintf(L"Not valid.\n");
                wprintf(L"%s\n",CkDkimW_lastErrorText(dkim));
            }
            else {
                wprintf(L"valid.\n");
            }

            // Show the additional information about the signature verification
            CkJsonObjectW_Load(json,CkDkimW_verifyInfo(dkim));
            wprintf(L"%s\n",CkJsonObjectW_emit(json));

            // The JSON contains information such as this:

            // 	{
            // 	  "domain": "amazonses.com",
            // 	  "selector": "7v7vs6w47njt4pimodk5mmttbegzsi6n",
            // 	  "publicKey": "MIGfMA0GCSqG...v2GvWPqGHz6uqeQIDAQAB",
            // 	  "canonicalization": "relaxed/simple",
            // 	  "algorithm": "rsa-sha256",
            // 	  "signedHeaders": "Subject:From:To:Date:Mime-Version:Content-Type:References:Message-Id:Feedback-ID",
            // 	  "verified": "yes"
            // 	}

            j = j + 1;
        }

        seqNum = seqNum + 1;
    }

    success = CkImapW_Disconnect(imap);


    CkImapW_Dispose(imap);
    CkDkimW_Dispose(dkim);
    CkJsonObjectW_Dispose(json);
    CkBinDataW_Dispose(mimeData);

    }