C++

SFTP use Cert's Private Key for Authentication (Windows)

See more SFTP Examples

Demonstrates how to use the private key of a pre-installed certificate (on Windows) for SFTP authentication. The certificate's private key must be marked as "exportable" when originally installed. C++

#include <CkCert.h>
#include <CkPrivateKey.h>
#include <CkSshKey.h>
#include <CkSFtp.h>

void ChilkatSample(void)
    {
    bool success = false;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCert cert;

    // Load the certificate from the Windows certificate store
    success = cert.LoadByCommonName("my_cert_common_name");
    if (success == false) {
        std::cout << cert.lastErrorText() << "\r\n";
        return;
    }

    // Get the private key.  
    CkPrivateKey privKey;
    success = cert.GetPrivateKey(privKey);
    if (success == false) {
        std::cout << cert.lastErrorText() << "\r\n";
        return;
    }

    const char *privKeyPem = privKey.getPkcs8Pem();
    if (privKey.get_LastMethodSuccess() == false) {
        std::cout << privKey.lastErrorText() << "\r\n";
        return;
    }

    CkSshKey sshKey;
    success = sshKey.FromOpenSshPrivateKey(privKeyPem);
    if (success == false) {
        std::cout << sshKey.lastErrorText() << "\r\n";
        return;
    }

    // Connect to an SSH/SFTP server
    CkSFtp sftp;
    success = sftp.Connect("sftp.example.com",22);
    if (success == false) {
        std::cout << sftp.lastErrorText() << "\r\n";
        return;
    }

    // Authenticate with the SSH server using a username + private key.
    // (The private key serves as the password.  The username identifies
    // the SSH user account on the server.)
    success = sftp.AuthenticatePk("mySshLogin",sshKey);
    if (success == false) {
        std::cout << sftp.lastErrorText() << "\r\n";
        return;
    }

    std::cout << "OK, the connection and authentication with the SSH server is completed." << "\r\n";

    // This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...
    }