(Java) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    boolean success;

    // Imagine we've previously saved our encrypted login and password within a JSON config file
    // that contains this:

    // {
    //   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
    //   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
    // }

    CkJsonObject json = new CkJsonObject();
    json.LoadFile("qa_data/passwords/ssh.json");

    CkCrypt2 crypt = new CkCrypt2();

    // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
    crypt.put_CryptAlgorithm("aes");
    crypt.put_CipherMode("cbc");
    crypt.put_KeyLength(128);
    crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F","hex");
    crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex");
    crypt.put_EncodingMode("base64");

    CkSecureString ssLogin = new CkSecureString();
    CkSecureString ssPassword = new CkSecureString();

    // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
    // a randomly generated session key.)
    crypt.DecryptSecureENC(json.stringOf("ssh_login"),ssLogin);
    crypt.DecryptSecureENC(json.stringOf("ssh_password"),ssPassword);

    CkSshTunnel tunnel = new CkSshTunnel();

    success = tunnel.Connect("MY-SSH-SERVER-DOMAIN-OR-IP",22);
    if (success != true) {
        System.out.println(tunnel.lastErrorText());
        return;
        }

    // Authenticate using secure strings
    success = tunnel.AuthenticateSecPw(ssLogin,ssPassword);
    if (success != true) {
        System.out.println(tunnel.lastErrorText());
        return;
        }

    System.out.println("SSH Tunnel Authentication successful.");

    // ...

    tunnel.CloseTunnel(true);
  }
}