(Node.js) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var success;

    // Imagine we've previously saved our encrypted login and password within a JSON config file
    // that contains this:

    // {
    //   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
    //   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
    // }

    var json = new chilkat.JsonObject();
    json.LoadFile("qa_data/passwords/ssh.json");

    var crypt = new chilkat.Crypt2();

    // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
    crypt.CryptAlgorithm = "aes";
    crypt.CipherMode = "cbc";
    crypt.KeyLength = 128;
    crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F","hex");
    crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex");
    crypt.EncodingMode = "base64";

    var ssLogin = new chilkat.SecureString();
    var ssPassword = new chilkat.SecureString();

    // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
    // a randomly generated session key.)
    crypt.DecryptSecureENC(json.StringOf("ssh_login"),ssLogin);
    crypt.DecryptSecureENC(json.StringOf("ssh_password"),ssPassword);

    var tunnel = new chilkat.SshTunnel();

    success = tunnel.Connect("MY-SSH-SERVER-DOMAIN-OR-IP",22);
    if (success !== true) {
        console.log(tunnel.LastErrorText);
        return;
    }

    // Authenticate using secure strings
    success = tunnel.AuthenticateSecPw(ssLogin,ssPassword);
    if (success !== true) {
        console.log(tunnel.LastErrorText);
        return;
    }

    console.log("SSH Tunnel Authentication successful.");

    // ...

    tunnel.CloseTunnel(true);

}

chilkatExample();