(DataFlex) Secure FTP with Client Certificate

Chilkat FTP2 provides the ability to use a client certificate with secure FTP (implicit or explicit SSL/TLS). This example demonstrates how to load a certificate from a .pfx and use it as the client-side SSL cert. Note: Client-side certificates are only needed in situations where the server demands one.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoFtp
    Handle hoCertStore
    String sPassword
    Boolean iSuccess
    Variant vCert
    Handle hoCert
    String sTemp1
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatFtp2)) To hoFtp
    If (Not(IsComObjectCreated(hoFtp))) Begin
        Send CreateComObject of hoFtp
    End

    Set ComHostname Of hoFtp To "ftp.***.com"
    Set ComPort Of hoFtp To 21
    Set ComUsername Of hoFtp To "test"
    Set ComPassword Of hoFtp To "test"

    // This example will use explict TLS/SSL.
    // Establish an explicit secure channel after connection
    // on the standard FTP port 21.
    Set ComAuthTls Of hoFtp To True

    // The Ssl property is for establishing an implicit SSL connection
    // on port 990.  Because this example uses explicit SSL, it 
    // should remain False.
    Set ComSsl Of hoFtp To False

    // Load a certificate from a .pfx
    // A PFX may contain several certs, including the certificates
    // in a chain of authority.
    Get Create (RefClass(cComChilkatCertStore)) To hoCertStore
    If (Not(IsComObjectCreated(hoCertStore))) Begin
        Send CreateComObject of hoCertStore
    End

    Move "***" To sPassword
    // Load the certs from a PFX into an in-memory certificate store:
    Get ComLoadPfxFile Of hoCertStore "chilkat.pfx" sPassword To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoCertStore To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Find the exact cert we'll use:

    Get ComFindCertBySubject Of hoCertStore "Chilkat Software, Inc." To vCert
    If (IsComObject(vCert)) Begin
        Get Create (RefClass(cComChilkatCert)) To hoCert
        Set pvComObject Of hoCert To vCert
    End
    Get ComLastMethodSuccess Of hoCertStore To bTemp1
    If (bTemp1 = False) Begin
        Showln "Certificate not found!"
        Procedure_Return
    End

    // Use this certificate for our secure (SSL/TLS) connection:
    Get ComSetSslClientCert Of hoFtp vCert To iSuccess
    Send Destroy of hoCert

    // Connect and login to the FTP server.  The connection is 
    // made secure because of the AuthTls setting.
    Get ComConnect Of hoFtp To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoFtp To sTemp1
        Showln sTemp1
        Procedure_Return
    End
    Else Begin
        // LastErrorText contains information even when
        // successful. This allows you to visually verify
        // that the secure connection actually occurred.
        Get ComLastErrorText Of hoFtp To sTemp1
        Showln sTemp1
    End

    Showln "Secure FTP Channel Established!"

    // Do whatever you're doing to do ...
    // upload files, download files, etc...

    // .....
    // .....

    Get ComDisconnect Of hoFtp To iSuccess


End_Procedure