(AutoIt) SSH HSM Public Key Authentication

Demonstrates how to authenticate with an SSH server using public key authentication using an HSM (USB token or smartcard).

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; This example assumes the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; Note: Chilkat's PKCS11 implementation runs on Windows, Linux, MacOs, and other supported operating systems.

$oPkcs11 = ObjCreate("Chilkat.Pkcs11")

; This would be a path to a .dylib on MacOS, or a path to a .so shared lib on Linux.
$oPkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"
Local $sPin = "0000"
Local $iUserType = 1

; Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above.
Local $bSuccess = $oPkcs11.QuickSession($iUserType,$sPin)
If ($bSuccess = False) Then
    ConsoleWrite($oPkcs11.LastErrorText & @CRLF)
    Exit
EndIf

; Set PKCS11 attributes to find our desired private key object.
$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("class","private_key")
$oJson.UpdateString("label","MySshKey")

; Get the PKCS11 handle to the private key located on the HSM.
Local $iPriv_handle = $oPkcs11.FindObject($oJson)

; Get the PKCS11 handle to the corresponding public key located on the HSM.
$oJson.UpdateString("class","public_key")

Local $iPub_handle = $oPkcs11.FindObject($oJson)

$oKey = ObjCreate("Chilkat.SshKey")
; The key type can be "rsa" or "ec"
Local $sKeyType = "rsa"
$bSuccess = $oKey.UsePkcs11($oPkcs11,$iPriv_handle,$iPub_handle,$sKeyType)
If ($bSuccess = False) Then
    ConsoleWrite($oKey.LastErrorText & @CRLF)
    Exit
EndIf

$oSsh = ObjCreate("Chilkat.Ssh")

$bSuccess = $oSsh.Connect("example.com",22)
If ($bSuccess <> True) Then
    ConsoleWrite($oSsh.LastErrorText & @CRLF)
    Exit
EndIf

; Authenticate with the SSH server using the login and
; HSM private key.  (The corresponding public key should've 
; been installed on the SSH server beforehand.)
$bSuccess = $oSsh.AuthenticatePk("myLogin",$oKey)
If ($bSuccess <> True) Then
    ConsoleWrite($oSsh.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Public-Key Authentication Successful!" & @CRLF)