Mime Tcl Reference Documentation

Mime

Current Version: 11.5.0

Chilkat.Mime

Build, parse, modify, serialize, secure, and inspect MIME and S/MIME data.

Mime provides low-level MIME and S/MIME handling for applications that need direct control over MIME structure, headers, body content, encodings, multipart relationships, attachments, and PKCS7/CMS security layers. It can load, create, inspect, modify, serialize, and save MIME messages; build multipart structures; manage headers and content-transfer encodings; extract attachments; convert MIME to and from XML; and sign, verify, encrypt, decrypt, or unwrap S/MIME content.

Create and load MIME

Build MIME content programmatically or load existing MIME from strings, files, byte data, or other application sources.

Headers and body content

Read, add, replace, or remove MIME headers, set body content, and control content types, charsets, and transfer encodings.

Multipart structures

Create and inspect multipart MIME trees such as mixed, alternative, related, signed, encrypted, and nested MIME structures.

Attachments and parts

Add, locate, extract, remove, or inspect MIME parts and attachments, including filenames and encoded body data.

S/MIME security

Sign, verify, encrypt, decrypt, unwrap, and inspect PKCS7/CMS S/MIME layers using certificates and private keys.

Serialization and XML

Emit MIME text, save MIME to files, or convert MIME to and from XML for structured inspection, transformation, or storage.

Common pattern: Use Mime when an application needs low-level control over MIME parts, headers, encodings, multipart layout, or S/MIME security. For ordinary email composition and message-level operations, use Email; use Mime when you need to work closer to the raw MIME structure.
Initial state: A new Mime object has no headers or child parts. Its string serialization consists only of the blank header/body separator (CRLF CRLF) until content is added.
MIME parsing is semantic, not byte-preserving. Loading and reserializing can unfold headers, normalize parameter quoting and transfer encodings, use CRLF for generated headers and multipart framing, and discard multipart preamble or epilogue text. Use byte-oriented methods such as LoadMimeBd and GetMimeBd when arbitrary 8-bit bytes or embedded NUL bytes must be preserved.

Object Creation

# 'this' is not a keyword in Tcl. It can freely be used as a variable name.
set this [new CkMime]

Properties

Boundary
string
# ckStr is a CkString
CkMime_get_Boundary $this $ckStr
set strVal [CkMime_get_boundary $this]
CkMime_put_Boundary $this $strVal

Gets or sets the raw boundary token used by a multipart MIME entity. Do not include surrounding quotation marks.

Content-Type: multipart/mixed; boundary="example-boundary"
For this example, Boundary is example-boundary. Chilkat automatically quotes the parameter when the token contains characters such as spaces or semicolons.
Normally automatic. Methods such as NewMultipartMixed, NewMultipartAlternative, and NewMultipartRelated generate a nonempty boundary.
Caller-supplied boundaries are not validated. Chilkat does not detect collisions with body text. An empty value is permitted but produces invalid multipart delimiters, and supplying quotation marks as part of the property value causes those quotation marks to become part of the boundary. The property can also be set on a nonmultipart entity, where it is simply added as a Content-Type parameter.

top
Charset
string
# ckStr is a CkString
CkMime_get_Charset $this $ckStr
set strVal [CkMime_get_charset $this]
CkMime_put_Charset $this $strVal

Gets or sets the charset parameter of the Content-Type header field.

Content-Type: text/plain; charset=utf-8
Changing this property preserves the media type and other parameters. Setting it when no Content-Type exists creates a Content-Type field, although the media type remains empty until ContentType is set.
Charset versus transfer encoding. The charset identifies how text characters are represented as bytes. Encoding controls the MIME transport representation of those bytes.
Empty-string behavior. Setting Charset to an empty string does not remove the parameter. It selects the platform default ANSI charset; on Windows this is typically windows-1252.

top
CmsOptions
string
# ckStr is a CkString
CkMime_get_CmsOptions $this $ckStr
set strVal [CkMime_get_cmsOptions $this]
CkMime_put_CmsOptions $this $strVal
Introduced in version 9.5.0.78

Gets or sets a JSON string containing advanced CMS/PKCS #7 signing and validation options. The default is an empty string, which selects normal behavior. A valid empty JSON object may also be supplied as {}.

Unknown JSON members are retained but ignored. Malformed JSON is normalized to {}. This property is intended for specialized interoperability requirements; applications should leave it empty unless a documented option is specifically needed.

top
ContentType
string
# ckStr is a CkString
CkMime_get_ContentType $this $ckStr
set strVal [CkMime_get_contentType $this]
CkMime_put_ContentType $this $strVal

Gets or sets the MIME media type of the current part, excluding all parameters. Supply a value such as text/plain, text/html, application/pdf, or multipart/mixed; do not include charset, boundary, or other parameters in this property.

Changing the media type preserves the existing charset and unrecognized parameters, but may remove parameters that are specific to the previous media type, such as format=flowed. Setting an empty string leaves an empty media type and can therefore produce an invalid-looking header if other parameters remain.

Classification methods use this value. Methods such as IsText, IsImage, and IsMultipart classify the media type stored here. Parameters must be set through their dedicated properties or header attributes, not appended to ContentType.

top
CurrentDateTime
string
# ckStr is a CkString
CkMime_get_CurrentDateTime $this $ckStr
set strVal [CkMime_get_currentDateTime $this]

Returns the current local date and time formatted as an Internet message date, including the numeric UTC offset. For example:

Fri, 21 Nov 1997 09:55:06 -0600

top
DebugLogFilePath
string
# ckStr is a CkString
CkMime_get_DebugLogFilePath $this $ckStr
set strVal [CkMime_get_debugLogFilePath $this]
CkMime_put_DebugLogFilePath $this $strVal

If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. This logging helps identify the context and history of Chilkat calls leading up to any crash or hang, aiding in debugging.

Enabling the VerboseLogging property provides more detailed information. This property is mainly used for debugging rare instances where a Chilkat method call causes a hang or crash, which should generally not happen.

Possible causes of hangs include:

  • A timeout property set to 0, indicating an infinite timeout.
  • A hang occurring within an event callback in the application code.
  • An internal bug in the Chilkat code causing the hang.

More Information and Examples
top
Disposition
string
# ckStr is a CkString
CkMime_get_Disposition $this $ckStr
set strVal [CkMime_get_disposition $this]
CkMime_put_Disposition $this $strVal

Gets or sets the disposition value from the Content-Disposition header field, excluding parameters such as filename.

Content-Disposition: attachment; filename="report.pdf"
Changing this property preserves an existing filename parameter. Typical values are attachment and inline.

top
Encoding
string
# ckStr is a CkString
CkMime_get_Encoding $this $ckStr
set strVal [CkMime_get_encoding $this]
CkMime_put_Encoding $this $strVal

Gets or sets the value of the Content-Transfer-Encoding header field for the current part. Common values include base64, quoted-printable, 7bit, 8bit, and binary.

Transfer encoding is not compression. It determines how the body bytes are represented in serialized MIME. GetBodyEncoded returns the transfer-encoded form, while GetBodyBd, GetBodyBinary, and SaveBody return or save decoded bytes.

top
Filename
string
# ckStr is a CkString
CkMime_get_Filename $this $ckStr
set strVal [CkMime_get_filename $this]
CkMime_put_Filename $this $strVal

Gets or sets the filename parameter of the Content-Disposition header field. The value is a receiver-facing filename, not a local filesystem path.

Changing this property preserves the disposition value but removes other Content-Disposition parameters such as size. Setting an empty string removes the filename parameter.

International filenames. When setting a non-ASCII filename, Chilkat emits an RFC 2047 encoded-word in filename=. When reading a header containing both filename= and filename*=, this property returns filename=. Use GetHeaderFieldAttribute to retrieve the raw filename* value.

top
LastErrorHtml
string
# ckStr is a CkString
CkMime_get_LastErrorHtml $this $ckStr
set strVal [CkMime_get_lastErrorHtml $this]

Provides HTML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorText
string
# ckStr is a CkString
CkMime_get_LastErrorText $this $ckStr
set strVal [CkMime_get_lastErrorText $this]

Provides plain text information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorXml
string
# ckStr is a CkString
CkMime_get_LastErrorXml $this $ckStr
set strVal [CkMime_get_lastErrorXml $this]

Provides XML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastMethodSuccess
boolean 1/0
set boolVal [CkMime_get_LastMethodSuccess $this]
CkMime_put_LastMethodSuccess $this $boolVal

Indicates the success or failure of the most recent method call: 1 means success, 0 means failure. This property remains unchanged by property setters or getters. This method is present to address challenges in checking for null or Nothing returns in certain programming languages. Note: This property does not apply to methods that return integer values or to boolean-returning methods where the boolean does not indicate success or failure.

top
Micalg
string
# ckStr is a CkString
CkMime_get_Micalg $this $ckStr
set strVal [CkMime_get_micalg $this]
CkMime_put_Micalg $this $strVal

Gets or sets the micalg parameter of a multipart/signed Content-Type header field.

Content-Type: multipart/signed;
  protocol="application/pkcs7-signature";
  micalg=sha-256;
  boundary="example-boundary"
The parameter advertises the message-digest algorithm used by the detached signature.
SigningHashAlg is authoritative. When a detached signature is created, SigningHashAlg selects the digest and Chilkat replaces any conflicting Micalg value with the corresponding MIME token, such as sha-1, sha-256, sha-384, or sha-512. Setting Micalg alone does not select the cryptographic digest.

More Information and Examples
top
Name
string
# ckStr is a CkString
CkMime_get_Name $this $ckStr
set strVal [CkMime_get_name $this]
CkMime_put_Name $this $strVal

Gets or sets the name parameter of the Content-Type header field. For attachments, Filename is generally the primary receiver-facing name.

Setting a non-ASCII value causes Chilkat to emit an RFC 2047 encoded-word in the name= parameter. Setting this property when no media type exists creates a Content-Type field with an empty media type.

top
NumDecryptCerts
integer
set intVal [CkMime_get_NumDecryptCerts $this]
Introduced in version 11.0.0

Returns the number of recipient or decryption certificates currently recorded by the most recent S/MIME encryption, decryption, or security-unwrapping operation. A new object returns 0. A successful single-recipient Encrypt records 1, and successful decryption records the certificate whose private key was used.

Use LastDecryptCert with a zero-based index to retrieve a recorded certificate. This is a result count; it is not the number of PFX sources or decryption certificates configured on the object.

More Information and Examples
top
NumHeaderFields
integer
set intVal [CkMime_get_NumHeaderFields $this]

Returns the number of header-field occurrences in the current part. Duplicate names count separately and retain their order. Valid indexes range from 0 through NumHeaderFields - 1 for use with GetHeaderFieldName and GetHeaderFieldValue.

During MIME parsing, duplicate ordinary fields are retained. Duplicate Content-Type fields are collapsed, with the last value taking effect.

More Information and Examples
top
NumParts
integer
set intVal [CkMime_get_NumParts $this]

Returns the number of direct child parts. It does not include deeper descendants. Iterate from 0 through NumParts - 1 and call PartAt to traverse the tree.

The object returned by PartAt provides live access to the stored child. Modifying that returned object modifies the parent MIME tree.

More Information and Examples
top
NumSignerCerts
integer
set intVal [CkMime_get_NumSignerCerts $this]

Returns the number of signer certificates currently recorded by the most recent S/MIME signing, signature-verification, or security-unwrapping operation. A new object returns 0. A single-certificate signing method records 1; Verify and UnwrapSecurity replace the count with the signer results from that operation.

A failed call to Verify clears the signer results and sets this property to 0. Use LastSignerCert with a zero-based index to retrieve a recorded signer certificate.

More Information and Examples
top
OaepHash
string
# ckStr is a CkString
CkMime_get_OaepHash $this $ckStr
set strVal [CkMime_get_oaepHash $this]
CkMime_put_OaepHash $this $strVal
Introduced in version 9.5.0.67

Gets or sets the hash algorithm used by RSAES-OAEP when encrypting the CMS content-encryption key. Supported values are sha1, sha256, sha384, and sha512. The default is sha256. An empty or unrecognized value leaves the current valid setting unchanged.

This property is used only when OaepPadding is 1. It is independent of OaepMgfHash; for example, OAEP may use SHA-256 while MGF1 uses SHA-1.

top
OaepMgfHash
string
# ckStr is a CkString
CkMime_get_OaepMgfHash $this $ckStr
set strVal [CkMime_get_oaepMgfHash $this]
CkMime_put_OaepMgfHash $this $strVal
Introduced in version 9.5.0.71

Gets or sets the hash algorithm used by the MGF1 mask generation function within RSAES-OAEP. Supported values are sha1, sha256, sha384, and sha512. The default is sha256. An empty or unrecognized value leaves the current valid setting unchanged.

This property is used only when OaepPadding is 1 and is independent of OaepHash.

More Information and Examples
top
OaepPadding
boolean 1/0
set boolVal [CkMime_get_OaepPadding $this]
CkMime_put_OaepPadding $this $boolVal
Introduced in version 9.5.0.67

Selects the RSA key-transport padding used when creating encrypted MIME. The default is 0, which uses RSAES-PKCS1-v1_5. Set to 1 to use RSAES-OAEP.

Scope. This setting protects the symmetric content-encryption key for an RSA recipient. It does not change the symmetric content algorithm selected by Pkcs7CryptAlg.

top
Pkcs7CryptAlg
string
# ckStr is a CkString
CkMime_get_Pkcs7CryptAlg $this $ckStr
set strVal [CkMime_get_pkcs7CryptAlg $this]
CkMime_put_Pkcs7CryptAlg $this $strVal

Gets or sets the symmetric content-encryption algorithm used when creating CMS/PKCS #7 encrypted MIME. Supported input values are aes, aes-gcm, des, 3des, and rc2. The default is aes. The aes-gcm option was added in version 10.0.0.

The getter returns normalized names: after setting aes-gcm it returns aes, and after setting 3des it returns des. The generated CMS data nevertheless uses AES-GCM or 3DES-CBC respectively.

Hybrid encryption. S/MIME encrypts the MIME content with a symmetric content-encryption key. The recipient certificate then protects that content-encryption key. This property selects the symmetric algorithm; Pkcs7KeyLength selects its key length.

top
Pkcs7KeyLength
integer
set intVal [CkMime_get_Pkcs7KeyLength $this]
CkMime_put_Pkcs7KeyLength $this $intVal

Gets or sets the content-encryption key length, in bits, used when creating CMS/PKCS #7 encrypted MIME. The default is 128.

Because this property may be set before Pkcs7CryptAlg, the setter accepts the union of key lengths that can be valid for any supported symmetric algorithm: 40, 56, 64, 128, 192, and 256. A value outside this set is rejected and the previous value is retained.

AlgorithmNormal key lengths
aes or aes-gcm128, 192, or 256
3des192
des40
rc240, 56, 64, or 128
Set both properties before encrypting. The property setter rejects only lengths that cannot be valid for any supported algorithm. Applications should select the algorithm and its appropriate key length before calling Encrypt or EncryptN.

More Information and Examples
top
Protocol
string
# ckStr is a CkString
CkMime_get_Protocol $this $ckStr
set strVal [CkMime_get_protocol $this]
CkMime_put_Protocol $this $strVal

Gets or sets the protocol parameter of the Content-Type header field. This parameter is commonly used by multipart/signed to identify the media type of the detached signature part.

Content-Type: multipart/signed;
  protocol="application/pkcs7-signature";
  micalg=sha-256;
  boundary="example-boundary"
For this example, Protocol is application/pkcs7-signature.

More Information and Examples
top
SigningAlg
string
# ckStr is a CkString
CkMime_get_SigningAlg $this $ckStr
set strVal [CkMime_get_signingAlg $this]
CkMime_put_SigningAlg $this $strVal
Introduced in version 9.5.0.67

Gets or sets the RSA signature scheme used when creating CMS/PKCS #7 signed MIME. The default and normalized PKCS #1 v1.5 value is PKCS1-V1_5. Set the property to RSASSA-PSS or pss to use RSASSA-PSS; the getter returns RSASSA-PSS.

An empty or unrecognized value selects PKCS1-V1_5. This setting applies only when the signing private key is RSA. It does not select the signature scheme for EC or DSA keys. The property controls signature creation and is not updated during verification; use GetLastJsonData to inspect a verified signature.

top
SigningHashAlg
string
# ckStr is a CkString
CkMime_get_SigningHashAlg $this $ckStr
set strVal [CkMime_get_signingHashAlg $this]
CkMime_put_SigningHashAlg $this $strVal

Gets or sets the message-digest algorithm used when creating CMS/PKCS #7 signatures. The default is sha256. Supported values are sha1, sha256, sha384, sha512, md5, and md2. Names are case-insensitive and are returned in lowercase.

An empty or unrecognized value selects sha1. This property controls signature creation only and is not changed when a signature is verified. After verification, call GetLastJsonData to inspect the digest algorithm found in the signed data.

Security guidance. Use a SHA-2 algorithm such as sha256 unless interoperability with a legacy system requires otherwise. MD2, MD5, and SHA-1 are retained for compatibility with older signed messages. Because invalid input falls back to SHA-1, applications should set this property to a known supported value.

More Information and Examples
top
UncommonOptions
string
# ckStr is a CkString
CkMime_get_UncommonOptions $this $ckStr
set strVal [CkMime_get_uncommonOptions $this]
CkMime_put_UncommonOptions $this $strVal
Introduced in version 9.5.0.89

Gets or sets a semicolon-delimited or implementation-specific option string used for uncommon compatibility requirements. The default is the empty string, and normal applications should leave it empty. Options placed here may be version-specific and should be used only when directed by Chilkat documentation or support.

top
UnwrapExtras
boolean 1/0
set boolVal [CkMime_get_UnwrapExtras $this]
CkMime_put_UnwrapExtras $this $boolVal

Controls whether UnwrapSecurity adds informative header fields describing the security layers removed. The default is 1.

HeaderExample value
X-NumPartsSigned1
X-SignaturesValidyes
X-NumPartsEncrypted1
X-Decryptedyes

Set to 0 when the application requires the unwrapped MIME without these additional status headers.

top
UseMmDescription
boolean 1/0
set boolVal [CkMime_get_UseMmDescription $this]
CkMime_put_UseMmDescription $this $boolVal

Controls whether Chilkat uses the conventional multipart preamble text This is a multi-part message in MIME format. when serializing a multipart entity. The default is 0. The preamble is meaningful only when the multipart has content and is ignored by MIME-aware readers.

top
UseXPkcs7
boolean 1/0
set boolVal [CkMime_get_UseXPkcs7 $this]
CkMime_put_UseXPkcs7 $this $boolVal

Controls whether newly created S/MIME media types use the historical x-pkcs7 names.

ValueGenerated media types
1 (default)application/x-pkcs7-mime and application/x-pkcs7-signature
0application/pkcs7-mime and application/pkcs7-signature

For detached signatures, the selected signature media type is used both for the outer protocol parameter and for the signature part. For opaque signed or encrypted MIME, it controls the application/...pkcs7-mime content type.

Interoperability. The x- forms are widely encountered in existing S/MIME messages. Chilkat recognizes both naming forms.

More Information and Examples
top
Utf8
boolean 1/0
set boolVal [CkMime_get_Utf8 $this]
CkMime_put_Utf8 $this $boolVal

When set to 1, all string arguments and return values are interpreted as UTF-8 strings. When set to 0, they are interpreted as ANSI strings.

In Chilkat v11.0.0 and later, the default value is 1. Before v11.0.0, it was 0.

top
VerboseLogging
boolean 1/0
set boolVal [CkMime_get_VerboseLogging $this]
CkMime_put_VerboseLogging $this $boolVal

If set to 1, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. The default value is 0. Verbose logging should only be used for debugging. The potentially large quantity of logged information may adversely affect peformance.

top
Version
string
# ckStr is a CkString
CkMime_get_Version $this $ckStr
set strVal [CkMime_get_version $this]

Version of the component/library, such as "10.1.0"

More Information and Examples
top

Methods

AddContentLength
CkMime_AddContentLength $this

Computes the byte length of the current entity's serialized MIME body and adds or updates its Content-Length header. The count is based on the transfer-encoded serialized body, not the decoded payload.

For a multipart entity, the count includes boundary delimiter lines, child headers, child bodies, and the closing boundary. Only the current entity's header is updated; child parts do not receive Content-Length fields. Repeated calls recompute the value and leave a single header occurrence.

top
AddDecryptCert
# cert is a CkCert
set status [CkMime_AddDecryptCert $this $cert]
Introduced in version 9.5.0.40

Adds cert to the internal collection of certificates available for S/MIME decryption. The certificate must have access to its corresponding private key. Call this method once for each candidate certificate.

The collection is searched by Decrypt and UnwrapSecurity. Other ways to provide decryption credentials include AddPfxSourceFile, AddPfxSourceBd, and UseCertVault.

Returns 1 for success, 0 for failure.

More Information and Examples
top
AddDetachedSignature
# cert is a CkCert
set status [CkMime_AddDetachedSignature $this $cert]

Creates an S/MIME detached signature using cert. The certificate itself must have access to its private key. On success, the current object becomes a multipart/signed entity with two direct children:

PartContents
FirstThe original MIME entity being signed.
SecondThe CMS/PKCS #7 signature data, normally named smime.p7s.

SigningHashAlg selects the digest and generated micalg parameter. For RSA keys, SigningAlg selects PKCS #1 v1.5 or RSASSA-PSS. UseXPkcs7 selects the signature media-type spelling.

Private-key requirement. Adding a matching PFX source does not supply a missing signing key for a public-only Cert. Load the private key into cert or use AddDetachedSignaturePk.
Signing an already signed MIME. Calling this method again creates a new outer multipart/signed layer. It does not add another signer to the existing CMS signer-information set.

Returns 1 for success, 0 for failure.

top
AddDetachedSignature2
# cert is a CkCert
# transferHeaderFields is a boolean
set status [CkMime_AddDetachedSignature2 $this $cert $transferHeaderFields]

Creates the same detached multipart/signed structure as AddDetachedSignature. cert is the signing certificate and must have access to its private key.

transferHeaderFieldsHeader placement
0Existing message header fields, such as Subject and From, remain on the first signed content part. The new outer multipart has no copies of those fields.
1Existing message header fields are moved to the new outer multipart/signed entity and removed from the first content part.

Returns 1 for success, 0 for failure.

top
AddDetachedSignaturePk
# cert is a CkCert
# privateKey is a CkPrivateKey
set status [CkMime_AddDetachedSignaturePk $this $cert $privateKey]

Creates a detached S/MIME signature using cert as the signer certificate and privateKey as its associated private key. Use this method when the certificate and private key are supplied separately.

On success, the current object becomes the same two-part multipart/signed structure described by AddDetachedSignature. SigningHashAlg, SigningAlg, and UseXPkcs7 control the generated signature.

Returns 1 for success, 0 for failure.

top
AddDetachedSignaturePk2
# cert is a CkCert
# privateKey is a CkPrivateKey
# transferHeaderFields is a boolean
set status [CkMime_AddDetachedSignaturePk2 $this $cert $privateKey $transferHeaderFields]

Creates a detached S/MIME signature using the certificate in cert and the corresponding private key in privateKey. transferHeaderFields controls placement of the existing message header fields:

transferHeaderFieldsHeader placement
0Headers remain on the first signed content part.
1Headers are moved to the new outer multipart/signed entity and removed from the first content part.

This is the separate-private-key counterpart of AddDetachedSignature2.

Returns 1 for success, 0 for failure.

top
AddEncryptCert
# cert is a CkCert
set status [CkMime_AddEncryptCert $this $cert]

Adds cert to the internal recipient-certificate list used by EncryptN. Call this method once for each intended recipient. Encryption uses the public key in each certificate, so recipient private keys are not required at encryption time.

Call ClearEncryptCerts to empty the list.

Returns 1 for success, 0 for failure.

top
AddHeaderField
# name is a string
# value is a string
set status [CkMime_AddHeaderField $this $name $value]

Appends a new header field named by name with the value in value. Existing fields having the same case-insensitive name are preserved. An empty value creates a legal empty-valued field.

Chilkat converts spaces in a header name to hyphens, removes embedded CR and LF characters from the value to prevent header injection, and folds long values when serializing.

Replacing versus appending. Use SetHeaderField to remove all existing occurrences and set one replacement value.

Returns 1 for success, 0 for failure.

top
AddPfxSourceBd
# bd is a CkBinData
# password is a string
set status [CkMime_AddPfxSourceBd $this $bd $password]
Introduced in version 11.0.0

Adds the PKCS #12/PFX bytes in bd to the internal collection of credential sources used by later S/MIME decryption operations. password is the password protecting the PFX data. Call the method once for each PFX source that should be searched.

The source remains configured across subsequent LoadMime calls and repeated decryptions. Chilkat continues searching after a PFX that does not contain the required recipient key.

Not a signing-key fallback. Adding a PFX source does not make a public-only certificate usable by the signing methods. The signing certificate itself must have its private key, or the private key must be supplied explicitly by a method whose name ends in Pk.

Returns 1 for success, 0 for failure.

More Information and Examples
top
AddPfxSourceFile
# pfxFilePath is a string
# password is a string
set status [CkMime_AddPfxSourceFile $this $pfxFilePath $password]

Adds the PFX/P12 file at the local filesystem path in pfxFilePath to the internal collection of credential sources used by later S/MIME decryption operations. password is the password protecting the file. Call the method once for each PFX source that should be searched.

The source remains configured across subsequent LoadMime calls and repeated decryptions. Chilkat continues searching after a PFX that does not contain the required recipient key.

Not a signing-key fallback. Adding a PFX source does not make a public-only certificate usable by the signing methods. The signing certificate itself must have its private key, or the private key must be supplied explicitly by a method whose name ends in Pk.

Returns 1 for success, 0 for failure.

More Information and Examples
top
AppendPart
# mime is a CkMime
set status [CkMime_AppendPart $this $mime]

Appends a copy of mime as the last direct child. Chilkat does not retain a reference to mime, so later changes to mime do not affect the appended part. The same source object may be appended more than once.

If the current object is not multipart, it is converted to multipart/mixed. The complete original entity, including its existing headers and body, becomes part 0; the copy of mime becomes part 1. The new outer entity contains its generated multipart Content-Type.

Editing an appended child. Retrieve it with PartAt. The object returned by PartAt is a live child, unlike the copied input to this method.

Returns 1 for success, 0 for failure.

top
AppendPartFromFile
# filename is a string
set status [CkMime_AppendPartFromFile $this $filename]

Reads the local file at filename, creates an attachment part, and appends it. Filename-extension matching is case-insensitive.

File kindGenerated headers
.txttext/plain; charset=windows-1252; format=flowed, 7bit, attachment filename and name
Known binary type, such as .PNGInferred media type such as image/png, base64, attachment filename and name
Unknown extensionapplication/octet-stream, base64, attachment filename and name

If the current object is not multipart, the same conversion described by AppendPart occurs. Calling this method on a new empty object therefore creates an empty part 0 and the file attachment as part 1.

Returns 1 for success, 0 for failure.

More Information and Examples
top
AsnBodyToXml
# outStr is a CkString (output)
set status [CkMime_AsnBodyToXml $this $outStr]
set retStr [CkMime_asnBodyToXml $this]

Parses the current part's decoded body as ASN.1 DER and returns an XML representation of the ASN.1 structure. This is primarily useful for inspecting CMS/PKCS #7 bodies such as application/pkcs7-mime or application/x-pkcs7-mime.

Content-Type: application/pkcs7-mime; smime-type=signed-data
Content-Transfer-Encoding: base64

MII...
Diagnostic conversion. The returned XML exposes ASN.1 tags, object identifiers, and values for inspection. It is not the MIME-to-XML representation returned by GetXml.

Returns 1 for success, 0 for failure.

More Information and Examples
top
ClearEncryptCerts
CkMime_ClearEncryptCerts $this

Clears the internal recipient-certificate list populated by AddEncryptCert. A subsequent call to EncryptN requires certificates to be added again.

More Information and Examples
top
ContainsEncryptedParts
set retBool [CkMime_ContainsEncryptedParts $this]

Returns 1 if the currently visible MIME tree contains a CMS/PKCS #7 encrypted entity. Both application/pkcs7-mime and application/x-pkcs7-mime forms are recognized.

Encrypted layers hide their contents. This method examines the MIME structure as it currently exists. It cannot report signed or encrypted entities inside ciphertext until the enclosing encrypted layer is successfully removed.

top
ContainsSignedParts
set retBool [CkMime_ContainsSignedParts $this]

Returns 1 if the currently visible MIME tree contains a complete detached or opaque CMS/PKCS #7 signed entity. A standalone application/pkcs7-signature or application/x-pkcs7-signature leaf part is not by itself classified as a signed message.

Encrypted layers hide their contents. A signature nested inside encrypted data is not visible until the encrypted layer is removed. After a signature is successfully verified and unwrapped, this method returns 0 because the signed wrapper no longer exists.

top
Convert8Bit
CkMime_Convert8Bit $this

Recursively converts every part whose Content-Transfer-Encoding is 8bit or binary to base64. Both the child object's Encoding property and the serialized header are updated. Parts using 7bit or another encoding are unchanged.

top
ConvertToMultipartAlt
set status [CkMime_ConvertToMultipartAlt $this]

Wraps the current entity in a new outer multipart/alternative entity. The original entity becomes the first and initially only child.

The new outer entity retains message-level and custom headers such as MIME-Version, Date, Subject, From, To, Content-ID, Content-Location, and custom fields. The original Content-Type, Content-Transfer-Encoding, Content-Disposition, and body move to the first child. An existing charset parameter is retained on the new multipart Content-Type. Calling the method again wraps the existing multipart in another multipart layer; the operation is not idempotent.

Alternative ordering. Additional representations can be appended with AppendPart. Conventionally, alternatives are ordered from least rich to most rich, such as text/plain followed by text/html.

Returns 1 for success, 0 for failure.

More Information and Examples
top
ConvertToMultipartMixed
set status [CkMime_ConvertToMultipartMixed $this]

Wraps the current entity in a new outer multipart/mixed entity. The original entity becomes the first and initially only child.

The new outer entity retains message-level and custom headers such as MIME-Version, Date, Subject, From, To, Content-ID, Content-Location, and custom fields. The original Content-Type, Content-Transfer-Encoding, Content-Disposition, and body move to the first child. An existing charset parameter is retained on the new multipart Content-Type. Calling the method again wraps the existing multipart in another multipart layer; the operation is not idempotent.

Returns 1 for success, 0 for failure.

top
ConvertToSigned
# cert is a CkCert
set status [CkMime_ConvertToSigned $this $cert]

Creates an opaque (attached) S/MIME signature using cert. The certificate itself must have access to its private key. On success, the current MIME entity is replaced by CMS/PKCS #7 signed-data containing both the original MIME bytes and the signature.

The result has no MIME child parts, uses Base64 content-transfer encoding, and has an application/x-pkcs7-mime or application/pkcs7-mime content type according to UseXPkcs7. SigningHashAlg and, for RSA keys, SigningAlg select the signing algorithms.

This differs from AddDetachedSignature, which creates a visible multipart/signed wrapper with a separate signature part.

Returns 1 for success, 0 for failure.

top
ConvertToSignedPk
# cert is a CkCert
# privateKey is a CkPrivateKey
set status [CkMime_ConvertToSignedPk $this $cert $privateKey]

Creates an opaque (attached) S/MIME signature using cert as the signer certificate and privateKey as its associated private key. Use this method when the certificate and private key are supplied separately.

The resulting CMS/PKCS #7 signed-data contains the original MIME entity and its signature, has no MIME child parts, and uses Base64 content-transfer encoding. For a detached multipart/signed result, use AddDetachedSignaturePk.

Returns 1 for success, 0 for failure.

top
Decrypt
set status [CkMime_Decrypt $this]

Decrypts the current CMS/PKCS #7 encrypted MIME entity and replaces it with the recovered MIME content. Chilkat identifies the intended recipient from the CMS recipient information and searches configured credential sources for the matching certificate and private key.

SourceHow it is supplied
Explicit certificateAddDecryptCert or DecryptUsingCert
PFX/P12AddPfxSourceFile, AddPfxSourceBd, or a DecryptUsingPfx... method
Certificate vaultUseCertVault
Platform certificate storeWindows certificate stores and the macOS Keychain are searched automatically where supported

On success, NumDecryptCerts and LastDecryptCert identify the certificate used, and GetLastJsonData reports the content-encryption algorithm and key size. On failure, the encrypted MIME remains unchanged.

Serialization after decryption. The recovered MIME content is restored semantically, but its generated serialization is not guaranteed to be byte-for-byte identical to the bytes that existed before encryption.

Returns 1 for success, 0 for failure.

top
Decrypt2
# cert is a CkCert
# privateKey is a CkPrivateKey
set status [CkMime_Decrypt2 $this $cert $privateKey]

Decrypts the current CMS/PKCS #7 encrypted MIME entity using the certificate in cert and its associated private key in privateKey. On success, the encrypted wrapper is replaced by the recovered MIME content, the decryption certificate is available through LastDecryptCert, and operation details are available through GetLastJsonData. On failure, the encrypted MIME remains unchanged.

Use this method when the certificate and private key are stored separately. Use Decrypt when Chilkat should locate the credential from configured sources.

Returns 1 for success, 0 for failure.

top
DecryptUsingCert
# cert is a CkCert
set status [CkMime_DecryptUsingCert $this $cert]
Introduced in version 9.5.0.40

Decrypts the current CMS/PKCS #7 encrypted MIME entity using cert. The certificate must have access to its corresponding private key; a public-only certificate is insufficient. On success, the encrypted wrapper is replaced by the recovered MIME content and cert is recorded in the decryption results. On failure, the encrypted MIME remains unchanged.

Returns 1 for success, 0 for failure.

top
DecryptUsingPfxFile
# pfxFilePath is a string
# pfxPassword is a string
set status [CkMime_DecryptUsingPfxFile $this $pfxFilePath $pfxPassword]

Decrypts the current CMS/PKCS #7 encrypted MIME entity using certificates and private keys from the PFX/P12 file at the local filesystem path in pfxFilePath. pfxPassword is the password protecting the file.

On success, the encrypted wrapper is replaced by the recovered MIME content and the matching certificate is available through LastDecryptCert. GetLastJsonData may include both CMS decryption details and information produced while reading the PFX. On failure, the encrypted MIME remains unchanged.

Returns 1 for success, 0 for failure.

top
Encrypt
# cert is a CkCert
set status [CkMime_Encrypt $this $cert]

Encrypts the current MIME entity for the recipient certificate in cert and replaces it with CMS/PKCS #7 encrypted S/MIME. cert must be RSA-based. Only the recipient's public key is needed to encrypt; the matching private key is required later to decrypt.

The default content encryption is AES-128-CBC. Pkcs7CryptAlg and Pkcs7KeyLength select the symmetric algorithm and key length. By default, RSAES-PKCS1-v1_5 transports the content-encryption key; set OaepPadding to 1 to use RSAES-OAEP, with OaepHash and OaepMgfHash controlling its parameters.

The generated MIME uses Base64 transfer encoding, the filename smime.p7m, and an application/x-pkcs7-mime or application/pkcs7-mime content type according to UseXPkcs7. After encryption, GetDecryptCertInfo can report the recipient identifiers stored in the CMS data. If encryption fails, the original MIME remains unchanged.

Returns 1 for success, 0 for failure.

top
EncryptN
set status [CkMime_EncryptN $this]

Encrypts the current MIME entity for every certificate previously added with AddEncryptCert. Each recipient receives independently protected access to the same encrypted content.

Add one certificate per intended recipient, call this method, and use ClearEncryptCerts before preparing a different recipient set.

Returns 1 for success, 0 for failure.

top
GetBodyBd
# binDat is a CkBinData
set status [CkMime_GetBodyBd $this $binDat]
Introduced in version 9.5.0.67

Replaces the contents of binDat with the decoded body bytes of the current part. Existing bytes in binDat are discarded. Base64 and quoted-printable are decoded. MIME headers, multipart boundaries, and child parts are not included.

Returns 1 for success, 0 for failure.

top
GetBodyDecoded
# outStr is a CkString (output)
set status [CkMime_GetBodyDecoded $this $outStr]
set retStr [CkMime_getBodyDecoded $this]

Returns the decoded body as text. Chilkat first decodes the Content-Transfer-Encoding and then interprets text according to the declared charset.

Use a byte-oriented getter for binary content. A string result cannot reliably represent arbitrary binary bytes or embedded NUL bytes. Use GetBodyBd or GetBodyBinary for binary payloads.

Returns 1 for success, 0 for failure.

top
GetBodyEncoded
# outStr is a CkString (output)
set status [CkMime_GetBodyEncoded $this $outStr]
set retStr [CkMime_getBodyEncoded $this]

Returns the current part's transfer-encoded body text without decoding Base64 or quoted-printable. The returned value is Chilkat's normalized serialization of the body, not necessarily the exact text that appeared in the loaded MIME. For example, Base64 padding and line wrapping or quoted-printable spelling may be regenerated.

Returns 1 for success, 0 for failure.

top
GetDecryptCertInfo
# certInfo is a CkJsonObject
set status [CkMime_GetDecryptCertInfo $this $certInfo]
Introduced in version 11.4.0

Examines the current encrypted S/MIME entity and writes recipient-certificate identifiers to the JsonObject in certInfo. This can be used to identify which certificate and private key must be made available before calling Decrypt or UnwrapSecurity. A typical result is:

{
  "recipientInfo": [
    {
      "serial": "166FC256FC66A64B20C710F15BFAB63E",
      "issuerCN": "Example Issuing CA"
    }
  ]
}

The method returns 0 and writes an empty JSON object when the current MIME entity is not encrypted, including after it has already been decrypted.

No private key is revealed. The encrypted message contains recipient identifiers and encrypted key material, not recipient private keys.

Returns 1 for success, 0 for failure.

top
GetEntireBody
# outStr is a CkString (output)
set status [CkMime_GetEntireBody $this $outStr]
set retStr [CkMime_getEntireBody $this]

Returns the complete serialized body of the current MIME entity. For multipart MIME, this includes boundary delimiters, each child part's headers and body, and the closing boundary. The current entity's own header fields are not included.

Use GetBodyDecoded when the decoded payload of a single part is needed.

Returns 1 for success, 0 for failure.

top
GetEntireHead
# outStr is a CkString (output)
set status [CkMime_GetEntireHead $this $outStr]
set retStr [CkMime_getEntireHead $this]

Returns the complete serialized header section of the current MIME entity. The body and any multipart child content are not included.

Returns 1 for success, 0 for failure.

top
GetHeaderField
# fieldName is a string
# outStr is a CkString (output)
set status [CkMime_GetHeaderField $this $fieldName $outStr]
set retStr [CkMime_getHeaderField $this $fieldName]

Returns the value of the first header field whose name matches fieldName case-insensitively. Duplicate later occurrences are not combined. Returns null when no matching field exists.

Returns 1 for success, 0 for failure.

top
GetHeaderFieldAttribute
# name is a string
# attrName is a string
# outStr is a CkString (output)
set status [CkMime_GetHeaderFieldAttribute $this $name $attrName $outStr]
set retStr [CkMime_getHeaderFieldAttribute $this $name $attrName]

Returns an attribute value parsed from the first header field named by name. Both the header name and attrName attribute name are matched case-insensitively. Surrounding quotation marks are removed, and semicolons inside a quoted value are handled as part of the value.

Extended parameters such as filename*=utf-8''r%C3%A9sum%C3%A9.txt are returned in their raw encoded form; this method does not percent-decode or apply the declared charset. Returns null when the field or attribute is absent.

Returns 1 for success, 0 for failure.

top
GetHeaderFieldName
# index is an integer
# outStr is a CkString (output)
set status [CkMime_GetHeaderFieldName $this $index $outStr]
set retStr [CkMime_getHeaderFieldName $this $index]

Returns the name of the header-field occurrence at zero-based index. Header order and original casing are preserved for ordinary loaded headers. Use NumHeaderFields to determine the valid range.

Returns 1 for success, 0 for failure.

More Information and Examples
top
GetHeaderFieldValue
# index is an integer
# outStr is a CkString (output)
set status [CkMime_GetHeaderFieldValue $this $index $outStr]
set retStr [CkMime_getHeaderFieldValue $this $index]

Returns the unfolded value of the header-field occurrence at zero-based index. Continuation lines are combined into a single value. Use NumHeaderFields to determine the valid range.

Returns 1 for success, 0 for failure.

More Information and Examples
top
GetLastJsonData
# json is a CkJsonObject
CkMime_GetLastJsonData $this $json
Introduced in version 9.5.0.69

Copies structured details from the most recent operation into json when such details are available. Many methods do not produce JSON data.

OperationTypical result
Signing or encryptionAn empty JSON object.
Verifypkcs7.verify details such as embedded certificates, digest algorithms, signer information, signature algorithm, signing time, message digest, and authenticated attributes.
Decryptionpkcs7.decrypt details including the content algorithm and key size. A PFX-based method may also include PKCS #12 parsing details.
UnwrapSecurityMay contain both verification and decryption sections when both kinds of security layer were removed.
Read immediately. The information describes the most recent applicable call on this object and can be replaced by a later operation.

More Information and Examples
top
GetMime
# outStr is a CkString (output)
set status [CkMime_GetMime $this $outStr]
set retStr [CkMime_getMime $this]

Serializes and returns the complete MIME entity, including headers, body, multipart boundaries, and all descendants.

Serialization is normalized. The result is semantically equivalent MIME, not a byte-for-byte copy of loaded input. Chilkat can unfold headers, normalize parameter quoting and transfer encodings, discard multipart preamble and epilogue text, and generate CRLF for headers and multipart framing. Existing body line endings may not always be rewritten.

Returns 1 for success, 0 for failure.

More Information and Examples
top
GetMimeBd
# bindat is a CkBinData
set status [CkMime_GetMimeBd $this $bindat]
Introduced in version 9.5.0.62

Serializes the complete MIME entity and appends its bytes to bindat. Existing BinData bytes are preserved. Use this method when arbitrary binary body bytes must not pass through a text string.

Serialization is normalized. The result is semantically equivalent MIME, not a byte-for-byte copy of loaded input. Chilkat can unfold headers, normalize parameter quoting and transfer encodings, discard multipart preamble and epilogue text, and generate CRLF for headers and multipart framing. Existing body line endings may not always be rewritten.

Returns 1 for success, 0 for failure.

More Information and Examples
top
GetMimeSb
# sb is a CkStringBuilder
set status [CkMime_GetMimeSb $this $sb]
Introduced in version 9.5.0.62

Serializes the complete MIME entity and appends it to sb. Existing StringBuilder content is preserved.

Serialization is normalized. The result is semantically equivalent MIME, not a byte-for-byte copy of loaded input. Chilkat can unfold headers, normalize parameter quoting and transfer encodings, discard multipart preamble and epilogue text, and generate CRLF for headers and multipart framing. Existing body line endings may not always be rewritten.

Returns 1 for success, 0 for failure.

top
GetSignatureSigningTimeStr
# index is an integer
# outStr is a CkString (output)
set status [CkMime_GetSignatureSigningTimeStr $this $index $outStr]
set retStr [CkMime_getSignatureSigningTimeStr $this $index]

Returns the CMS signingTime signed attribute for the signer at zero-based index, formatted as an RFC 822-style date string in GMT. For example:

Wed, 29 Jul 2026 14:32:58 GMT

Call HasSignatureSigningTime first because the attribute is optional. Use NumSignerCerts for the signer count.

Signing time is not a trusted timestamp. The CMS signingTime value is supplied by the signer. It is different from a timestamp token issued and signed by a trusted timestamp authority.

Returns 1 for success, 0 for failure.

More Information and Examples
top
GetStructure
# fmt is a string
# outStr is a CkString (output)
set status [CkMime_GetStructure $this $fmt $outStr]
set retStr [CkMime_getStructure $this $fmt]
Introduced in version 9.5.0.56

Returns a concise MIME-tree summary. fmt is case-insensitive. The value xml selects XML output; all other values, including text, an empty string, or an unrecognized value, select the indented text format.

multipart/mixed
    text/plain
    application/octet-stream
<multipart-mixed>
    <text-plain />
    <application-octet-stream />
</multipart-mixed>

Returns 1 for success, 0 for failure.

top
GetXml
# outStr is a CkString (output)
set status [CkMime_GetXml $this $outStr]
set retStr [CkMime_getXml $this]

Converts the MIME tree to Chilkat's XML representation and returns it as a string. Header names become XML element names, structured header parameters become XML attributes, duplicate headers become repeated elements, multipart children are nested in subpart elements, and binary bodies are represented in an encoded textual form.

XML round-tripping is semantic. Loading this XML reconstructs an equivalent MIME tree, but it is not byte-preserving and header names are normalized to lowercase.

Returns 1 for success, 0 for failure.

More Information and Examples
top
HasSignatureSigningTime
# index is an integer
set retBool [CkMime_HasSignatureSigningTime $this $index]

Returns 1 if the signer at zero-based index has a CMS signingTime signed attribute. Use NumSignerCerts for the signer count and GetSignatureSigningTimeStr to retrieve the value.

More Information and Examples
top
IsApplicationData
set retBool [CkMime_IsApplicationData $this]

Returns 1 when ContentType begins with application/. It returns 0 for an empty or malformed media type.

More Information and Examples
top
IsAttachment
set retBool [CkMime_IsAttachment $this]

Returns 1 when the current part's disposition value is attachment, matched case-insensitively. Parameters such as filename do not affect the test. An inline part remains non-attachment even when it has a filename.

More Information and Examples
top
IsAudio
set retBool [CkMime_IsAudio $this]

Returns 1 when ContentType begins with audio/.

More Information and Examples
top
IsEncrypted
set retBool [CkMime_IsEncrypted $this]

Returns 1 when the current MIME entity is a CMS/PKCS #7 encrypted S/MIME wrapper. Both application/pkcs7-mime and application/x-pkcs7-mime forms are recognized. To search the visible MIME tree rather than only the current entity, use ContainsEncryptedParts.

More Information and Examples
top
IsHtml
set retBool [CkMime_IsHtml $this]

Returns 1 when ContentType is text/html. The ContentType property must contain only the media type; set parameters such as charset separately.

More Information and Examples
top
IsImage
set retBool [CkMime_IsImage $this]

Returns 1 when ContentType begins with image/, including values such as image/svg+xml.

More Information and Examples
top
IsMultipart
set retBool [CkMime_IsMultipart $this]

Returns 1 when ContentType begins with multipart/.

More Information and Examples
top
IsMultipartAlternative
set retBool [CkMime_IsMultipartAlternative $this]

Returns 1 when ContentType is multipart/alternative.

top
IsMultipartMixed
set retBool [CkMime_IsMultipartMixed $this]

Returns 1 when ContentType is multipart/mixed.

More Information and Examples
top
IsMultipartRelated
set retBool [CkMime_IsMultipartRelated $this]

Returns 1 when ContentType is multipart/related.

More Information and Examples
top
IsPlainText
set retBool [CkMime_IsPlainText $this]

Returns 1 when ContentType is text/plain.

More Information and Examples
top
IsSigned
set retBool [CkMime_IsSigned $this]

Returns 1 when the current MIME entity is a complete CMS/PKCS #7 signed S/MIME wrapper, including detached multipart/signed and opaque signed-data forms. A standalone application/pkcs7-signature or application/x-pkcs7-signature leaf part is not by itself classified as a signed message. To search the visible MIME tree, use ContainsSignedParts.

More Information and Examples
top
IsText
set retBool [CkMime_IsText $this]

Returns 1 when ContentType begins with text/.

More Information and Examples
top
IsVideo
set retBool [CkMime_IsVideo $this]

Returns 1 when ContentType begins with video/.

More Information and Examples
top
IsXml
set retBool [CkMime_IsXml $this]

Returns 1 only for text/xml or application/xml. It does not classify structured-suffix media types such as application/soap+xml, application/atom+xml, or image/svg+xml as XML.

More Information and Examples
top
LastDecryptCert
# index is an integer
# cert is a CkCert
set status [CkMime_LastDecryptCert $this $index $cert]
Introduced in version 11.0.0

Loads into cert the decryption certificate at zero-based index from the most recent successful decryption or security-unwrapping operation. Valid indexes range from 0 through NumDecryptCerts - 1. The returned certificate has access to the private key used for decryption.

An invalid index returns 0 and leaves cert unchanged.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LastSignerCert
# index is an integer
# cert is a CkCert
set status [CkMime_LastSignerCert $this $index $cert]
Introduced in version 11.0.0

Loads into cert the signer certificate at zero-based index from the most recent successful signature-verification or security-unwrapping operation. Valid indexes range from 0 through NumSignerCerts - 1. The returned certificate normally contains only the public key; it does not gain access to the signer's private key.

An invalid index returns 0 and leaves cert unchanged. A later failed call to Verify clears the signer results.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LoadMime
# mimeMsg is a string
set status [CkMime_LoadMime $this $mimeMsg]

Parses the complete MIME text in mimeMsg and replaces the current object's headers, body, and multipart tree. A successful call always replaces the previous MIME.

If no blank line separates headers from the body, lines that appear header-like are parsed as headers and the body is empty. Data after the header/body separator belongs to the body.

Permissive parser and normalized output. Chilkat accepts many imperfect messages. Observed behavior includes ignoring malformed header lines and leading non-header text, using the last duplicate Content-Type, repairing a missing multipart closing delimiter during serialization, treating unmatched boundary-like text as an ordinary body, and tolerating malformed Base64 or quoted-printable. LF-only and CR-only input are accepted; generated headers and multipart framing use CRLF. Loading and reserializing is therefore not guaranteed to reproduce the original bytes, and multipart preamble and epilogue text are not retained.
Text input is not a raw-byte container. Use LoadMimeBd or LoadMimeBytes for arbitrary 8-bit bytes or embedded NUL bytes.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LoadMimeBd
# bindat is a CkBinData
set status [CkMime_LoadMimeBd $this $bindat]
Introduced in version 9.5.0.62

Parses complete MIME bytes from bindat and replaces the current MIME on success. This is the preferred loader when the MIME can contain arbitrary 8-bit body bytes or embedded NUL bytes. Parsing tolerance and serialization normalization are the same as LoadMime.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LoadMimeFile
# fileName is a string
set status [CkMime_LoadMimeFile $this $fileName]

Reads and parses the complete MIME entity from the local file at fileName. A successful call replaces the current MIME. If the file cannot be opened, the method returns 0 and preserves the existing object unchanged.

Parsing tolerance and serialization normalization are the same as LoadMime.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LoadMimeSb
# sb is a CkStringBuilder
set status [CkMime_LoadMimeSb $this $sb]
Introduced in version 9.5.0.62

Parses complete MIME text from sb and replaces the current MIME on success. Parsing tolerance and serialization normalization are the same as LoadMime.

Use byte input for arbitrary MIME bytes. A StringBuilder is text-oriented. Use LoadMimeBd for binary MIME containing arbitrary 8-bit values or NUL bytes.

Returns 1 for success, 0 for failure.

top
LoadXml
# xml is a string
set status [CkMime_LoadXml $this $xml]

Reconstructs a MIME tree from Chilkat's MIME XML in xml. On success, the current object is replaced. If the XML is invalid, the method returns 0 and preserves the existing MIME unchanged.

The reconstructed MIME is semantically equivalent but not byte-identical to the MIME that produced the XML. Header names are normalized to lowercase.

Returns 1 for success, 0 for failure.

More Information and Examples
top
LoadXmlFile
# fileName is a string
set status [CkMime_LoadXmlFile $this $fileName]

Reads Chilkat MIME XML from the local file at fileName and reconstructs the MIME tree. On success, the current object is replaced. If the file cannot be opened or the XML is invalid, the method returns 0 and preserves the existing MIME unchanged. Header names are normalized to lowercase during reconstruction.

Returns 1 for success, 0 for failure.

More Information and Examples
top
NewMessageRfc822
# mimeObject is a CkMime
set status [CkMime_NewMessageRfc822 $this $mimeObject]

Clears the current object and initializes it as message/rfc822. Its body is a serialized copy of mimeObject at the time of the call. Later modifications to mimeObject do not change the embedded message.

Returns 1 for success, 0 for failure.

More Information and Examples
top
NewMultipartAlternative
set status [CkMime_NewMultipartAlternative $this]

Initializes an empty multipart/alternative entity. Clears all existing headers, body content, and child parts. The new object contains only a multipart Content-Type with an automatically generated boundary, has zero parts, and does not automatically add MIME-Version.

Returns 1 for success, 0 for failure.

top
NewMultipartMixed
set status [CkMime_NewMultipartMixed $this]

Initializes an empty multipart/mixed entity. Clears all existing headers, body content, and child parts. The new object contains only a multipart Content-Type with an automatically generated boundary, has zero parts, and does not automatically add MIME-Version.

Returns 1 for success, 0 for failure.

top
NewMultipartRelated
set status [CkMime_NewMultipartRelated $this]

Initializes an empty multipart/related entity. Clears all existing headers, body content, and child parts. The new object contains only a multipart Content-Type with an automatically generated boundary, has zero parts, and does not automatically add MIME-Version.

Returns 1 for success, 0 for failure.

top
PartAt
# index is an integer
# subPart is a CkMime
set status [CkMime_PartAt $this $index $subPart]
Introduced in version 11.0.0

Provides live access to the direct child at zero-based index through subPart. Modifying subPart after a successful call modifies the child stored in the parent MIME tree.

Valid indexes range from 0 through NumParts - 1. An invalid index returns 0 and preserves subPart unchanged.

Different from AppendPart. AppendPart stores a copy of its argument. This method exposes the actual stored child.

Returns 1 for success, 0 for failure.

More Information and Examples
top
PartsToFiles
# path is a string
# st is a CkStringTable
set status [CkMime_PartsToFiles $this $path $st]
Introduced in version 11.0.0

Recursively traverses the MIME tree and saves each part having a nonempty filename parameter to the existing directory in path. A name parameter alone is not used as a fallback. The disposition may be attachment or inline; a filename is what controls extraction.

  • Only the final path component of a MIME filename is used. Directory components, absolute paths, and .. traversal are discarded.
  • On Windows, invalid filename characters are replaced with underscores.
  • Duplicate filenames target the same path; later parts overwrite earlier parts.
  • st is appended to rather than cleared. Each added entry is the full path actually written, including any sanitized filename.
  • The destination directory is not created. If it does not exist, the method returns 0, creates no files, and appends nothing to st.
Treat MIME filenames as untrusted. Use a controlled destination directory and apply any application-specific policy for file types, size limits, overwriting, and renaming.

Returns 1 for success, 0 for failure.

More Information and Examples
top
RemoveHeaderField
# fieldName is a string
# bAllOccurrences is a boolean
CkMime_RemoveHeaderField $this $fieldName $bAllOccurrences

Removes fields whose name matches fieldName case-insensitively. If bAllOccurrences is 0, only the first matching occurrence is removed. If bAllOccurrences is 1, all matching occurrences are removed. Remaining fields retain their relative order.

top
RemovePart
# index is an integer
set status [CkMime_RemovePart $this $index]

Removes the direct child at zero-based index. Valid indexes range from 0 through NumParts - 1. An out-of-range index returns 0 and leaves the tree unchanged.

Returns 1 for success, 0 for failure.

More Information and Examples
top
SaveBody
# filename is a string
set status [CkMime_SaveBody $this $filename]

Writes the decoded body bytes of the current part to the local path in filename. Base64 and quoted-printable are decoded. MIME headers and multipart framing are not written.

File behavior. Existing files are overwritten. Parent directories are not created, and passing a directory as the destination fails. On Windows, an existing read-only file is replaced and the read-only attribute is removed.

Returns 1 for success, 0 for failure.

top
SaveMime
# filename is a string
set status [CkMime_SaveMime $this $filename]

Serializes the complete MIME entity and writes it to the local path in filename, including headers, body, multipart boundaries, and all descendants.

Serialization is normalized. The result is semantically equivalent MIME, not a byte-for-byte copy of loaded input. Chilkat can unfold headers, normalize parameter quoting and transfer encodings, discard multipart preamble and epilogue text, and generate CRLF for headers and multipart framing. Existing body line endings may not always be rewritten.
File behavior. Existing files are overwritten. Parent directories are not created, and passing a directory as the destination fails. On Windows, an existing read-only file is replaced and the read-only attribute is removed.

Returns 1 for success, 0 for failure.

More Information and Examples
top
SaveXml
# filename is a string
set status [CkMime_SaveXml $this $filename]

Writes Chilkat's MIME XML representation to the local path in filename. The file can be loaded by LoadXmlFile.

File behavior. Existing files are overwritten. Parent directories are not created, and passing a directory as the destination fails. On Windows, an existing read-only file is replaced and the read-only attribute is removed.

Returns 1 for success, 0 for failure.

More Information and Examples
top
SetBody
# str is a string
CkMime_SetBody $this $str

Sets the current part's body from str while preserving existing content headers such as Content-Type, charset, and Content-Transfer-Encoding.

Multipart entities serialize their child parts. Calling this method on a multipart object changes what the body getter methods return, but the assigned body is not included in the serialized multipart output while child parts are present. Build multipart content through AppendPart and PartAt.

top
SetBodyBd
# bd is a CkBinData
set status [CkMime_SetBodyBd $this $bd]
Introduced in version 11.0.0

Sets the decoded body bytes from bd, changes Content-Transfer-Encoding to base64, and preserves the bytes exactly. It does not set a Content-Type, disposition, filename, or name; set those separately when needed.

Returns 1 for success, 0 for failure.

More Information and Examples
top
SetBodyFromEncoded
# encoding is a string
# str is a string
set status [CkMime_SetBodyFromEncoded $this $encoding $str]

Sets the body from transfer-encoded text. encoding must be base64 or quoted-printable; other values, including 7bit, 8bit, binary, an unknown name, or an empty string, cause failure.

Base64 whitespace is accepted and the stored representation is normalized. Invalid Base64 causes the method to return 0. On any failure, all existing headers and body content are preserved unchanged.

Do not encode twice. str must already be in the encoding named by encoding. To provide decoded bytes, use SetBodyBd or SetBodyFromBinary.

Returns 1 for success, 0 for failure.

top
SetBodyFromFile
# fileName is a string
set status [CkMime_SetBodyFromFile $this $fileName]

Reads the local file at fileName and replaces the current part's body and content headers according to the filename extension.

File kindResult
.txttext/plain; charset=windows-1252; format=flowed, 7bit
.htmltext/html; charset=windows-1252, 7bit
Unknown extensionapplication/octet-stream, base64, attachment, and filename/name parameters based on the local filename

If the file cannot be opened, the method returns 0 and preserves the existing MIME unchanged.

Returns 1 for success, 0 for failure.

top
SetBodyFromHtml
# str is a string
set status [CkMime_SetBodyFromHtml $this $str]

Sets str as HTML and changes the media type to text/html. For ASCII input, Chilkat uses Content-Transfer-Encoding: 7bit and does not add a charset. Existing unrelated headers are preserved.

Returns 1 for success, 0 for failure.

top
SetBodyFromPlainText
# str is a string
set status [CkMime_SetBodyFromPlainText $this $str]

Sets str as plain text. For ASCII input, Chilkat sets Content-Type: text/plain; format=flowed and Content-Transfer-Encoding: 7bit without a charset. For non-ASCII UTF-8 input, it sets charset=utf-8 and uses 8bit. Existing unrelated headers are preserved.

Returns 1 for success, 0 for failure.

top
SetBodyFromXml
# str is a string
set status [CkMime_SetBodyFromXml $this $str]

Sets str as XML, changes the media type to text/xml, and selects a transfer encoding appropriate for the text. For ASCII input, Chilkat uses 7bit and does not add a charset.

The XML declaration's encoding value is not copied to the MIME charset parameter.

Different from LoadXml. This method places an XML document in the MIME body. LoadXml reconstructs an entire MIME object from Chilkat MIME XML.

Returns 1 for success, 0 for failure.

top
SetHeaderField
# name is a string
# value is a string
set status [CkMime_SetHeaderField $this $name $value]

Sets one header field named by name. Matching is case-insensitive. All existing occurrences are removed and one replacement is inserted. If no field exists, a new one is added. Passing an empty value removes all matching occurrences rather than creating an empty-valued field.

Use AddHeaderField to append another occurrence or to create an empty-valued field.

Returns 1 for success, 0 for failure.

top
SetVerifyCert
# cert is a CkCert
set status [CkMime_SetVerifyCert $this $cert]

Supplies cert as a signer-certificate fallback for subsequent signature verification. This is useful when the CMS/PKCS #7 signature does not embed the signer certificate and Chilkat cannot otherwise locate it. Only the public key is required.

This does not require a particular signer. An embedded signer certificate takes precedence. If the CMS signature embeds the correct signer certificate, verification can succeed even when cert is an unrelated certificate, and LastSignerCert returns the embedded certificate. To enforce signer identity, verify first and then compare the returned signer certificate using application-defined criteria such as its serial number, fingerprint, subject, issuer, or trusted chain.

Returns 1 for success, 0 for failure.

top
UnwrapSecurity
set status [CkMime_UnwrapSecurity $this]

Removes supported S/MIME security layers and restores the underlying MIME content. It handles both common layer orders: a message signed and then encrypted, and a message encrypted and then signed. It continues through nested top-level layers until no additional supported security wrapper remains.

After a successful call, NumSignerCerts and LastSignerCert identify verified signers, while NumDecryptCerts and LastDecryptCert identify decryption certificates. GetLastJsonData may contain both pkcs7.verify and pkcs7.decrypt details.

Additional result headers. When UnwrapExtras is 1, Chilkat adds headers such as X-NumPartsSigned, X-SignaturesValid, X-NumPartsEncrypted, and X-Decrypted. Set it to 0 to omit these headers.

Returns 1 for success, 0 for failure.

top
UrlEncodeBody
# charset is a string
CkMime_UrlEncodeBody $this $charset

Replaces the current body with an application/x-www-form-urlencoded-style representation using the character set named by charset. Spaces become +, a literal plus becomes %2B, non-ASCII bytes become %HH sequences, and separators such as & and = remain unchanged.

Input:  a b+c&d=e
Output: a+b%2Bc&d=e

The MIME content headers are not changed. If the named character set is unsupported, the body remains unchanged.

Not a MIME transfer encoding. This operation is distinct from base64 and quoted-printable.

More Information and Examples
top
UseCertVault
# vault is a CkXmlCertVault
set status [CkMime_UseCertVault $this $vault]

Sets vault as the certificate vault used to locate certificates and private keys for S/MIME encryption, decryption, signing, and verification. Only one vault is active; each call replaces the previously configured vault.

Use XmlCertVault when credentials are maintained independently of platform certificate stores or individual PFX sources.

Returns 1 for success, 0 for failure.

More Information and Examples
top
Verify
set status [CkMime_Verify $this]

Verifies the current CMS/PKCS #7 signed MIME entity and removes the signature wrapper. Both detached multipart/signed messages and opaque CMS signed-data are supported. The method works with signed MIME loaded from serialized input as well as MIME signed by the current object.

On success, the object is restored to the MIME structure and content that was signed, NumSignerCerts reports the verified signer count, LastSignerCert returns the signer certificate, and GetLastJsonData reports CMS verification details. A detached signature can restore the original serialization exactly, but opaque signed-data restoration is semantic and is not guaranteed to reproduce byte-for-byte identical MIME serialization.

On failure, the signed wrapper remains unchanged, no content is unwrapped, and the signer-result count is cleared to 0.

SetVerifyCert is a fallback, not a signer restriction. When the CMS data embeds a usable signer certificate, Chilkat uses that embedded certificate. Verification can therefore succeed even when SetVerifyCert was given an unrelated certificate. Enforce signer identity after verification by examining LastSignerCert.
What verification proves. Cryptographic verification establishes that the signed bytes have not changed and that the signature matches the signer certificate. Application trust decisions may additionally require validating the certificate chain, identity, usage, validity period, and revocation status.

Returns 1 for success, 0 for failure.

top

Deprecated

NumEncryptCerts
integer
set intVal [CkMime_get_NumEncryptCerts $this]
This property is deprecated. It will be removed in a future version.

Deprecated. Use NumDecryptCerts instead.

This property is retained as an older name for the certificate-result count associated with S/MIME encryption, decryption, and security-unwrapping operations.

top
AddPfxSourceData Deprecated
# pfxFileData is a CkByteData
# pfxPassword is a string
set status [CkMime_AddPfxSourceData $this $pfxFileData $pfxPassword]

Legacy byte-array method. Adds the PKCS #12/PFX data in pfxFileData to the internal collection of credential sources used by later S/MIME decryption operations. pfxPassword is the password protecting the PFX. Call the method once for each PFX source that should be searched. Prefer AddPfxSourceBd when a BinData object is available.

The source remains configured across subsequent LoadMime calls and repeated decryptions. Chilkat continues searching after a PFX that does not contain the required recipient key.

Not a signing-key fallback. Adding a PFX source does not make a public-only certificate usable by the signing methods. The signing certificate itself must have its private key, or the private key must be supplied explicitly by a method whose name ends in Pk.

Returns 1 for success, 0 for failure.

top
DecryptUsingPfxData Deprecated
# pfxData is a CkByteData
# password is a string
set status [CkMime_DecryptUsingPfxData $this $pfxData $password]

Legacy byte-array method. Decrypts the current CMS/PKCS #7 encrypted MIME entity using certificates and private keys from the PFX/P12 bytes in pfxData. password is the password protecting the PFX data.

On success, the encrypted wrapper is replaced by the recovered MIME content and the matching certificate is available through LastDecryptCert. On failure, the encrypted MIME remains unchanged.

Returns 1 for success, 0 for failure.

top
ExtractPartsToFiles
# returns a CkStringArray
# dirPath is a string
set ret_stringArray [CkMime_ExtractPartsToFiles $this $dirPath]
This method is deprecated and replaced by PartsToFiles

Deprecated. Applications should call PartsToFiles.

This method recursively saves parts having a nonempty filename parameter to the existing directory in dirPath and returns a StringArray containing the created paths. See PartsToFiles for the current extraction and filename-handling rules.

Returns NULL on failure

More Information and Examples
top
FindIssuer
# returns a CkCert
# cert is a CkCert
set ret_cert [CkMime_FindIssuer $this $cert]
This method is deprecated.

Deprecated. Use the certificate object's GetIssuer method instead.

Finds the issuer of cert. If cert is self-issued or a root certificate, the returned object is a copy of cert.

Returns NULL on failure

top
GetBodyBinary Deprecated
# outData is a CkByteData (output)
set status [CkMime_GetBodyBinary $this $outData]

Returns the decoded body bytes of the current part. Base64 and quoted-printable are decoded, but no MIME headers or multipart framing are included. This legacy byte-array method preserves arbitrary bytes, including embedded NUL bytes.

Returns 1 for success, 0 for failure.

top
GetEncryptCert
# returns a CkCert
# index is an integer
set ret_cert [CkMime_GetEncryptCert $this $index]
This method is deprecated and replaced by LastDecryptCert

Deprecated. Use LastDecryptCert instead.

Loads the certificate at zero-based index from the certificate results recorded by the most recent applicable S/MIME operation. Use NumDecryptCerts for the count.

Returns NULL on failure

More Information and Examples
top
GetMimeBytes Deprecated
# outBytes is a CkByteData (output)
set status [CkMime_GetMimeBytes $this $outData]

Returns the complete serialized MIME entity as a byte array. This preserves binary body bytes that cannot safely pass through a string.

Serialization is normalized. The result is semantically equivalent MIME, not a byte-for-byte copy of loaded input. Chilkat can unfold headers, normalize parameter quoting and transfer encodings, discard multipart preamble and epilogue text, and generate CRLF for headers and multipart framing. Existing body line endings may not always be rewritten.

Returns 1 for success, 0 for failure.

top
GetPart
# returns a CkMime
# index is an integer
set ret_mime [CkMime_GetPart $this $index]
This method is deprecated and replaced by PartAt

This method is deprecated. Applications should call PartAt.

Retrieves the direct child at zero-based index. The returned object provides live access to the child stored in the parent MIME tree, so modifying it modifies the parent.

Returns NULL on failure

top
GetSignerCert
# returns a CkCert
# index is an integer
set ret_cert [CkMime_GetSignerCert $this $index]
This method is deprecated and replaced by LastSignerCert

Deprecated. Use LastSignerCert instead.

Returns the signer certificate at zero-based index from the most recent verification or security-unwrapping operation.

Returns NULL on failure

More Information and Examples
top
GetSignerCertChain
# returns a CkCertChain
# index is an integer
set ret_certChain [CkMime_GetSignerCertChain $this $index]
Introduced in version 9.5.0.40
This method is deprecated.

Deprecated. Retrieve the signer certificate with LastSignerCert and then obtain its certificate chain through the Cert API.

This method returns the chain associated with the signer at zero-based index.

Returns NULL on failure

top
LastJsonData
# returns a CkJsonObject
set ret_jsonObject [CkMime_LastJsonData $this]
Introduced in version 9.5.0.69
This method is deprecated.

Deprecated. Use GetLastJsonData instead.

Returns a JsonObject containing details produced by the most recent operation when that operation provides structured diagnostic data. For example, after UnwrapSecurity, the JSON may describe the signature, key-transport, content-encryption, and certificate information encountered.

Returns NULL on failure

top
LoadMimeBytes Deprecated
# binData is a CkByteData
set status [CkMime_LoadMimeBytes $this $binData]

Parses complete MIME bytes from binData and replaces the current MIME on success. This byte-oriented loader preserves arbitrary 8-bit values and embedded NUL bytes. Parsing tolerance and serialization normalization are the same as LoadMime.

Returns 1 for success, 0 for failure.

top
SetBodyFromBinary Deprecated
# binData is a CkByteData
set status [CkMime_SetBodyFromBinary $this $binData]

Legacy byte-array method. Sets the decoded body bytes from binData, changes Content-Transfer-Encoding to base64, and preserves the bytes exactly. It does not set a Content-Type, disposition, filename, or name; set those separately when needed. Prefer SetBodyBd when using BinData.

Returns 1 for success, 0 for failure.

top