Java Requires Chilkat v10.1.2+

Using WS_FTP Self-signed Certificate file (.crt) and Private Key File. (.key)

See more FTP Examples

Demonstrates how to use a self-signed certificate created by WS_FTP with Chilkat FTP2.

Note: It is usually not necessary for the FTP client to use a client-side certificate. Most FTP servers using SSL and TLS connections (explicit or implicit) do not require client-side certs. In addition, some high-security FTP servers require "real" certificates -- meaning certificates issued by a real certificate authority with a chain of authentication that leads to a trusted root certificate. The certificates created by WS_FTP are self-signed and untrusted.

Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.CertStore;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Ftp2;
import com.chilkatsoft.chilkat2.JsonObject;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        // Important:  Before running this program, convert your
        // .crt and .key files to a .p12 using OpenSSL:
        // The command is this:
        // openssl pkcs12 -export -in test.crt -inkey test.key -out test.p12
        //

        Ftp2 ftp = new Ftp2();

        ftp.setHostname("ftp.example.com");
        ftp.setPort(21);
        ftp.setUsername("testLogin");
        ftp.setPassword("testPassword");

        // This example will use explict TLS/SSL.
        // Establish an explicit secure channel after connection
        // on the standard FTP port 21.
        ftp.setAuthTls(true);

        // The Ssl property is for establishing an implicit SSL connection
        // on port 990.  Because this example uses explicit SSL, it
        // should remain false.
        ftp.setSsl(false);

        // Create an instance of a certificate store object, load a .p12 file,
        // locate the certificate we need, and use it for signing.
        // (a P12/PFX file may contain more than one certificate.)
        CertStore certStore = new CertStore();
        // The 1st argument is the filename, the 2nd arg is the
        // .p12 file's password.  (OpenSSL will prompty you to set a password
        // when converting the .crt and .key into a .p12).
        try {
            certStore.loadPfxFile("test.p12", "secret");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        JsonObject jsonCN = new JsonObject();
        jsonCN.updateString("CN", "cert common name");

        Cert cert = new Cert();
        try {
            certStore.findCert(jsonCN, cert);

            ftp.setSslClientCert(cert);

            // Connect and login to the FTP server.
            ftp.connect();
            // LastErrorText contains information even when
            // successful. This allows you to visually verify
            // that the secure connection actually occurred.
            System.out.println(ftp.getLastErrorText());
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println("Secure FTP Channel Established!");
        System.out.println(ftp.getLastErrorText());

        // Do whatever you're doing to do ...
        // upload files, download files, etc...

        // ...
        // ...

        ftp.disconnect();
    }
}