(MFC) SFTP use Cert's Private Key for Authentication (Windows)

Demonstrates how to use the private key of a pre-installed certificate (on Windows) for SFTP authentication. The certificate's private key must be marked as "exportable" when originally installed.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCert.h>
#include <CkPrivateKey.h>
#include <CkSshKey.h>
#include <CkSFtp.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCert cert;

    // Load the certificate from the Windows certificate store
    bool success = cert.LoadByCommonName("my_cert_common_name");
    if (success == false) {
        strOut.append(cert.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Get the private key.  
    CkPrivateKey *privKey = cert.ExportPrivateKey();
    if (cert.get_LastMethodSuccess() == false) {
        strOut.append(cert.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    const char *privKeyPem = privKey->getPkcs8Pem();
    if (privKey->get_LastMethodSuccess() == false) {
        strOut.append(privKey->lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    CkSshKey sshKey;
    success = sshKey.FromOpenSshPrivateKey(privKeyPem);
    if (success == false) {
        strOut.append(sshKey.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Connect to an SSH/SFTP server
    CkSFtp sftp;
    success = sftp.Connect("sftp.example.com",22);
    if (success == false) {
        strOut.append(sftp.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    // Authenticate with the SSH server using a username + private key.
    // (The private key serves as the password.  The username identifies
    // the SSH user account on the server.)
    success = sftp.AuthenticatePk("mySshLogin",sshKey);
    if (success == false) {
        strOut.append(sftp.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("OK, the connection and authentication with the SSH server is completed.");
    strOut.append("\r\n");

    // This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }