(PHP ActiveX) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows Note: The php_com_dotnet.dll may need to be enabled inside of php.ini.

<?php

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
// }

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject')
$json = new COM("Chilkat.JsonObject");
$json->LoadFile('qa_data/passwords/ssh.json');

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2')
$crypt = new COM("Chilkat.Crypt2");

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
$crypt->CryptAlgorithm = 'aes';
$crypt->CipherMode = 'cbc';
$crypt->KeyLength = 128;
$crypt->SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
$crypt->SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
$crypt->EncodingMode = 'base64';

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.SecureString')
$ssLogin = new COM("Chilkat.SecureString");
// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.SecureString')
$ssPassword = new COM("Chilkat.SecureString");

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
$crypt->DecryptSecureENC($json->stringOf('ssh_login'),$ssLogin);
$crypt->DecryptSecureENC($json->stringOf('ssh_password'),$ssPassword);

// For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.SshTunnel')
$tunnel = new COM("Chilkat.SshTunnel");

$success = $tunnel->Connect('MY-SSH-SERVER-DOMAIN-OR-IP',22);
if ($success != 1) {
    print $tunnel->LastErrorText . "\n";
    exit;
}

// Authenticate using secure strings
$success = $tunnel->AuthenticateSecPw($ssLogin,$ssPassword);
if ($success != 1) {
    print $tunnel->LastErrorText . "\n";
    exit;
}

print 'SSH Tunnel Authentication successful.' . "\n";

// ...

$tunnel->CloseTunnel(1);

?>