(Objective-C) SSH Authentication using an SSH Certificate

See more SSH Examples

Note: This example requires Chilkat v11.0.0 or greater.

For more information, see https://www.chilkatsoft.com/understanding_ssh_certificates.asp

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoStringBuilder.h>
#import <CkoSshKey.h>
#import <CkoSsh.h>
#import <NSString.h>

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoStringBuilder *sbSshCert = [[CkoStringBuilder alloc] init];
BOOL success = [sbSshCert LoadFile: @"qa_data/sshCert/user_ecdsa_key-cert.pub" charset: @"utf-8"];
if (success == NO) {
    NSLog(@"%@",@"Failed to load user_ecdsa_key-cert.pub");
    return;
}

CkoStringBuilder *sbPrivKey = [[CkoStringBuilder alloc] init];
success = [sbPrivKey LoadFile: @"qa_data/sshKeys/user_ecdsa_key" charset: @"utf-8"];
if (success == NO) {
    NSLog(@"%@",@"Failed to load user_ecdsa_key");
    return;
}

CkoSshKey *key = [[CkoSshKey alloc] init];
// Provide the password if the user_ecdsa_key is stored in an encrypted format.
key.Password = @"secret";
success = [key FromOpenSshPrivateKey: [sbPrivKey GetAsString]];
if (success == NO) {
    NSLog(@"%@",key.LastErrorText);
    return;
}

// Indicate that the SSH certificate is to be used for authentication.
// The UseSshCertificate method was added in Chilkat v11.0.0
[key UseSshCertificate: [sbSshCert GetAsString]];

CkoSsh *ssh = [[CkoSsh alloc] init];

NSString *hostname = @"ssh.example.com";
int port = 22;
success = [ssh Connect: hostname port: [NSNumber numberWithInt: port]];
if (success != YES) {
    NSLog(@"%@",ssh.LastErrorText);
    return;
}

success = [ssh AuthenticatePk: @"myLogin" privateKey: key];
if (success != YES) {
    NSLog(@"%@",ssh.LastErrorText);
    return;
}

NSLog(@"%@",@"Public-Key Authentication using an SSH Certificate was Successful!");