(Delphi DLL) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, SshTunnel, SecureString, JsonObject, Crypt2;

...

procedure TForm1.Button1Click(Sender: TObject);
var
success: Boolean;
json: HCkJsonObject;
crypt: HCkCrypt2;
ssLogin: HCkSecureString;
ssPassword: HCkSecureString;
tunnel: HCkSshTunnel;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
// }

json := CkJsonObject_Create();
CkJsonObject_LoadFile(json,'qa_data/passwords/ssh.json');

crypt := CkCrypt2_Create();

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
CkCrypt2_putCryptAlgorithm(crypt,'aes');
CkCrypt2_putCipherMode(crypt,'cbc');
CkCrypt2_putKeyLength(crypt,128);
CkCrypt2_SetEncodedKey(crypt,'000102030405060708090A0B0C0D0E0F','hex');
CkCrypt2_SetEncodedIV(crypt,'000102030405060708090A0B0C0D0E0F','hex');
CkCrypt2_putEncodingMode(crypt,'base64');

ssLogin := CkSecureString_Create();
ssPassword := CkSecureString_Create();

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
CkCrypt2_DecryptSecureENC(crypt,CkJsonObject__stringOf(json,'ssh_login'),ssLogin);
CkCrypt2_DecryptSecureENC(crypt,CkJsonObject__stringOf(json,'ssh_password'),ssPassword);

tunnel := CkSshTunnel_Create();

success := CkSshTunnel_Connect(tunnel,'MY-SSH-SERVER-DOMAIN-OR-IP',22);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkSshTunnel__lastErrorText(tunnel));
    Exit;
  end;

// Authenticate using secure strings
success := CkSshTunnel_AuthenticateSecPw(tunnel,ssLogin,ssPassword);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkSshTunnel__lastErrorText(tunnel));
    Exit;
  end;

Memo1.Lines.Add('SSH Tunnel Authentication successful.');

// ...

CkSshTunnel_CloseTunnel(tunnel,True);

CkJsonObject_Dispose(json);
CkCrypt2_Dispose(crypt);
CkSecureString_Dispose(ssLogin);
CkSecureString_Dispose(ssPassword);
CkSshTunnel_Dispose(tunnel);

end;