(MFC) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCert.h>
#include <CkPrivateKey.h>
#include <CkSshKey.h>
#include <CkSFtp.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCert cert;

    const char *pfxFilepath = "qa_data/pfx/my.pfx";
    const char *pfxPassword = "secret";

    // A PFX typically contains certificates in the chain of authentication.
    // The Chilkat cert object will choose the certificate w/
    // private key farthest from the root authority cert.
    // To access all the certificates in a PFX, use the 
    // Chilkat certificate store object instead.
    bool success = cert.LoadPfxFile(pfxFilepath,pfxPassword);
    if (success != true) {
        strOut.append(cert.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Get the private key.  
    CkPrivateKey *privKey = cert.ExportPrivateKey();
    if (cert.get_LastMethodSuccess() == false) {
        strOut.append(cert.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    const char *privKeyPem = privKey->getPkcs8Pem();
    if (privKey->get_LastMethodSuccess() == false) {
        strOut.append(privKey->lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkSshKey sshKey;
    success = sshKey.FromOpenSshPrivateKey(privKeyPem);
    if (success == false) {
        strOut.append(sshKey.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Connect to an SSH/SFTP server
    CkSFtp sftp;
    success = sftp.Connect("sftp.example.com",22);
    if (success == false) {
        strOut.append(sftp.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Authenticate with the SSH server using a username + private key.
    // (The private key serves as the password.  The username identifies
    // the SSH user account on the server.)
    success = sftp.AuthenticatePk("mySshLogin",sshKey);
    if (success == false) {
        strOut.append(sftp.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("OK, the connection and authentication with the SSH server is completed.");
    strOut.append("\r\n");

    // This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }