(Objective-C) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoJsonObject.h>
#import <CkoCrypt2.h>
#import <CkoSecureString.h>
#import <CkoSshTunnel.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

BOOL success;

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
// }

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json LoadFile: @"qa_data/passwords/ssh.json"];

CkoCrypt2 *crypt = [[CkoCrypt2 alloc] init];

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.CryptAlgorithm = @"aes";
crypt.CipherMode = @"cbc";
crypt.KeyLength = [NSNumber numberWithInt:128];
[crypt SetEncodedKey: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
[crypt SetEncodedIV: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
crypt.EncodingMode = @"base64";

CkoSecureString *ssLogin = [[CkoSecureString alloc] init];
CkoSecureString *ssPassword = [[CkoSecureString alloc] init];

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
[crypt DecryptSecureENC: [json StringOf: @"ssh_login"] secureStr: ssLogin];
[crypt DecryptSecureENC: [json StringOf: @"ssh_password"] secureStr: ssPassword];

CkoSshTunnel *tunnel = [[CkoSshTunnel alloc] init];

success = [tunnel Connect: @"MY-SSH-SERVER-DOMAIN-OR-IP" port: [NSNumber numberWithInt: 22]];
if (success != YES) {
    NSLog(@"%@",tunnel.LastErrorText);
    return;
}

// Authenticate using secure strings
success = [tunnel AuthenticateSecPw: ssLogin password: ssPassword];
if (success != YES) {
    NSLog(@"%@",tunnel.LastErrorText);
    return;
}

NSLog(@"%@",@"SSH Tunnel Authentication successful.");

// ...

[tunnel CloseTunnel: YES];