(SQL Server) Verify FTP SSL Server Certificate

This example demonstrates how to verify the FTP server's certificate and authenticity. The intent is to verify the authenticity of the server before passing a login/password to it.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @ftp int
    -- Use "Chilkat_9_5_0.Ftp2" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Ftp2', @ftp OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    EXEC sp_OASetProperty @ftp, 'Hostname', 'ftp.myftpserver.com'
    EXEC sp_OASetProperty @ftp, 'Username', 'myUsername'
    EXEC sp_OASetProperty @ftp, 'Password', 'myPassword'

    -- Establish an AUTH SSL secure channel after connection
    -- on the standard FTP port 21.
    EXEC sp_OASetProperty @ftp, 'AuthSsl', 1

    -- The Ssl property is for establishing an implicit SSL connection
    -- on port 990.  Do not set it.
    EXEC sp_OASetProperty @ftp, 'Ssl', 0

    -- Indicate that the FTP server must have a verifiable SSL certificate.
    -- Do not accept self-signed certs or certificates that are
    -- expired, revoked, or cannot be verified to a root authority:
    EXEC sp_OASetProperty @ftp, 'RequireSslCertVerify', 1

    -- You may also set a requirement.  In this example,
    -- the certificate's Common Name (CN) must match the
    -- required string exactly:
    EXEC sp_OAMethod @ftp, 'SetSslCertRequirement', NULL, 'subjectcn', 'Chilkat Software, Inc.'

    -- Connect and login to the FTP server.
    DECLARE @success int
    EXEC sp_OAMethod @ftp, 'Connect', @success OUT
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @ftp, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @ftp
        RETURN
      END
    ELSE
      BEGIN
        -- LastErrorText contains information even when
        -- successful. This allows you to visually verify
        -- that the secure connection actually occurred.
        EXEC sp_OAGetProperty @ftp, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
      END

    -- After logging on, you may examine the FTP server's cert:
    DECLARE @cert int

    EXEC sp_OAMethod @ftp, 'GetSslServerCert', @cert OUT
    EXEC sp_OAGetProperty @ftp, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 <> 1
      BEGIN

        PRINT 'No server certificate!'
      END
    ELSE
      BEGIN
        -- Display the distinguished name of the SSL cert.
        EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
        PRINT @sTmp0
      END


    PRINT 'Secure FTP Channel Established!'

    -- Do whatever you're doing to do ...
    -- upload files, download files, etc...

    EXEC sp_OAMethod @ftp, 'Disconnect', @success OUT

    EXEC @hr = sp_OADestroy @ftp


END
GO