(Chilkat2-Python) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat2.Cert()

pfxFilepath = "qa_data/pfx/my.pfx"
pfxPassword = "secret"

# A PFX typically contains certificates in the chain of authentication.
# The Chilkat cert object will choose the certificate w/
# private key farthest from the root authority cert.
# To access all the certificates in a PFX, use the 
# Chilkat certificate store object instead.
success = cert.LoadPfxFile(pfxFilepath,pfxPassword)
if (success != True):
    print(cert.LastErrorText)
    sys.exit()

# Get the private key.  
# privKey is a CkPrivateKey
privKey = cert.ExportPrivateKey()
if (cert.LastMethodSuccess == False):
    print(cert.LastErrorText)
    sys.exit()

privKeyPem = privKey.GetPkcs8Pem()
if (privKey.LastMethodSuccess == False):
    print(privKey.LastErrorText)
    sys.exit()

sshKey = chilkat2.SshKey()
success = sshKey.FromOpenSshPrivateKey(privKeyPem)
if (success == False):
    print(sshKey.LastErrorText)
    sys.exit()

# Connect to an SSH/SFTP server
sftp = chilkat2.SFtp()
success = sftp.Connect("sftp.example.com",22)
if (success == False):
    print(sftp.LastErrorText)
    sys.exit()

# Authenticate with the SSH server using a username + private key.
# (The private key serves as the password.  The username identifies
# the SSH user account on the server.)
success = sftp.AuthenticatePk("mySshLogin",sshKey)
if (success == False):
    print(sftp.LastErrorText)
    sys.exit()

print("OK, the connection and authentication with the SSH server is completed.")

# This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...