(Objective-C) Secure FTP with Client Certificate

Chilkat FTP2 provides the ability to use a client certificate with secure FTP (implicit or explicit SSL/TLS). This example demonstrates how to load a certificate from a .pfx and use it as the client-side SSL cert. Note: Client-side certificates are only needed in situations where the server demands one.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoFtp2.h>
#import <CkoCertStore.h>
#import <NSString.h>
#import <CkoCert.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoFtp2 *ftp = [[CkoFtp2 alloc] init];

ftp.Hostname = @"ftp.***.com";
ftp.Port = [NSNumber numberWithInt:21];
ftp.Username = @"test";
ftp.Password = @"test";

// This example will use explict TLS/SSL.
// Establish an explicit secure channel after connection
// on the standard FTP port 21.
ftp.AuthTls = YES;

// The Ssl property is for establishing an implicit SSL connection
// on port 990.  Because this example uses explicit SSL, it 
// should remain NO.
ftp.Ssl = NO;

// Load a certificate from a .pfx
// A PFX may contain several certs, including the certificates
// in a chain of authority.
CkoCertStore *certStore = [[CkoCertStore alloc] init];
NSString *password = 0;
password = @"***";
// Load the certs from a PFX into an in-memory certificate store:
BOOL success = [certStore LoadPfxFile: @"chilkat.pfx" password: password];
if (success != YES) {
    NSLog(@"%@",certStore.LastErrorText);
    return;
}

// Find the exact cert we'll use:
CkoCert *cert = 0;
cert = [certStore FindCertBySubject: @"Chilkat Software, Inc."];
if (certStore.LastMethodSuccess == NO) {
    NSLog(@"%@",@"Certificate not found!");
    return;
}

// Use this certificate for our secure (SSL/TLS) connection:
success = [ftp SetSslClientCert: cert];

// Connect and login to the FTP server.  The connection is 
// made secure because of the AuthTls setting.
success = [ftp Connect];
if (success != YES) {
    NSLog(@"%@",ftp.LastErrorText);
    return;
}
else {
    // LastErrorText contains information even when
    // successful. This allows you to visually verify
    // that the secure connection actually occurred.
    NSLog(@"%@",ftp.LastErrorText);
}

NSLog(@"%@",@"Secure FTP Channel Established!");

// Do whatever you're doing to do ...
// upload files, download files, etc...

// .....
// .....

success = [ftp Disconnect];