Lianja

Secure FTP with Client Certificate

See more FTP Examples

Chilkat FTP2 provides the ability to use a client certificate with secure FTP (implicit or explicit SSL/TLS). This example demonstrates how to load a certificate from a .pfx and use it as the client-side SSL cert. Note: Client-side certificates are only needed in situations where the server demands one. Lianja

llSuccess = .F.

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loFtp = createobject("CkFtp2")

loFtp.Hostname = "ftp.example.com"
loFtp.Port = 21
loFtp.Username = "test"
loFtp.Password = "test"

// This example will use explict TLS/SSL.
// Establish an explicit secure channel after connection
// on the standard FTP port 21.
loFtp.AuthTls = .T.

// The Ssl property is for establishing an implicit SSL connection
// on port 990.  Because this example uses explicit SSL, it 
// should remain .F..
loFtp.Ssl = .F.

// Load a certificate from a .pfx
// A PFX may contain several certs, including the certificates
// in a chain of authority.
loCertStore = createobject("CkCertStore")

lcPassword = "***"
// Load the certs from a PFX into an in-memory certificate store:
llSuccess = loCertStore.LoadPfxFile("chilkat.pfx",lcPassword)
if (llSuccess <> .T.) then
    ? loCertStore.LastErrorText
    release loFtp
    release loCertStore
    return
endif

// Find the desired certificate.
loJsonCN = createobject("CkJsonObject")
loJsonCN.UpdateString("CN","cert common name")

loCert = createobject("CkCert")
llSuccess = loCertStore.FindCert(loJsonCN,loCert)
if (llSuccess = .F.) then
    ? "Certificate not found!"
    release loFtp
    release loCertStore
    release loJsonCN
    release loCert
    return
endif

// Use this certificate for our secure (SSL/TLS) connection:
llSuccess = loFtp.SetSslClientCert(loCert)

// Connect and login to the FTP server.  The connection is 
// made secure because of the AuthTls setting.
llSuccess = loFtp.Connect()
if (llSuccess <> .T.) then
    ? loFtp.LastErrorText
    release loFtp
    release loCertStore
    release loJsonCN
    release loCert
    return
else
    // LastErrorText contains information even when
    // successful. This allows you to visually verify
    // that the secure connection actually occurred.
    ? loFtp.LastErrorText
endif

? "Secure FTP Channel Established!"

// Do whatever you're doing to do ...
// upload files, download files, etc...

// .....
// .....

llSuccess = loFtp.Disconnect()


release loFtp
release loCertStore
release loJsonCN
release loCert