Delphi ActiveX Requires Chilkat v11.0.0+

SFTP use Cert's Private Key for Authentication (Windows)

See more SFTP Examples

Demonstrates how to use the private key of a pre-installed certificate (on Windows) for SFTP authentication. The certificate's private key must be marked as "exportable" when originally installed. Delphi ActiveX

var
success: Integer;
cert: TChilkatCert;
privKey: TPrivateKey;
privKeyPem: WideString;
sshKey: TChilkatSshKey;
sftp: TChilkatSFtp;

begin
success := 0;

//  This example assumes the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

cert := TChilkatCert.Create(Self);

//  Load the certificate from the Windows certificate store
success := cert.LoadByCommonName('my_cert_common_name');
if (success = 0) then
  begin
    Memo1.Lines.Add(cert.LastErrorText);
    Exit;
  end;

//  Get the private key.  
privKey := TPrivateKey.Create(Self);
success := cert.GetPrivateKey(privKey.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(cert.LastErrorText);
    Exit;
  end;

privKeyPem := privKey.GetPkcs8Pem();
if (privKey.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(privKey.LastErrorText);
    Exit;
  end;

sshKey := TChilkatSshKey.Create(Self);
success := sshKey.FromOpenSshPrivateKey(privKeyPem);
if (success = 0) then
  begin
    Memo1.Lines.Add(sshKey.LastErrorText);
    Exit;
  end;

//  Connect to an SSH/SFTP server
sftp := TChilkatSFtp.Create(Self);
success := sftp.Connect('sftp.example.com',22);
if (success = 0) then
  begin
    Memo1.Lines.Add(sftp.LastErrorText);
    Exit;
  end;

//  Authenticate with the SSH server using a username + private key.
//  (The private key serves as the password.  The username identifies
//  the SSH user account on the server.)
success := sftp.AuthenticatePk('mySshLogin',sshKey.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(sftp.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('OK, the connection and authentication with the SSH server is completed.');

//  This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...