(Java) SSH Authentication using an SSH Certificate

See more SSH Examples

Note: This example requires Chilkat v11.0.0 or greater.

For more information, see https://www.chilkatsoft.com/understanding_ssh_certificates.asp

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkStringBuilder sbSshCert = new CkStringBuilder();
    boolean success = sbSshCert.LoadFile("qa_data/sshCert/user_ecdsa_key-cert.pub","utf-8");
    if (success == false) {
        System.out.println("Failed to load user_ecdsa_key-cert.pub");
        return;
        }

    CkStringBuilder sbPrivKey = new CkStringBuilder();
    success = sbPrivKey.LoadFile("qa_data/sshKeys/user_ecdsa_key","utf-8");
    if (success == false) {
        System.out.println("Failed to load user_ecdsa_key");
        return;
        }

    CkSshKey key = new CkSshKey();
    // Provide the password if the user_ecdsa_key is stored in an encrypted format.
    key.put_Password("secret");
    success = key.FromOpenSshPrivateKey(sbPrivKey.getAsString());
    if (success == false) {
        System.out.println(key.lastErrorText());
        return;
        }

    // Indicate that the SSH certificate is to be used for authentication.
    // The UseSshCertificate method was added in Chilkat v11.0.0
    key.UseSshCertificate(sbSshCert.getAsString());

    CkSsh ssh = new CkSsh();

    String hostname = "ssh.example.com";
    int port = 22;
    success = ssh.Connect(hostname,port);
    if (success != true) {
        System.out.println(ssh.lastErrorText());
        return;
        }

    success = ssh.AuthenticatePk("myLogin",key);
    if (success != true) {
        System.out.println(ssh.lastErrorText());
        return;
        }

    System.out.println("Public-Key Authentication using an SSH Certificate was Successful!");
  }
}