(PHP Extension) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
// }

$json = new CkJsonObject();
$json->LoadFile('qa_data/passwords/ssh.json');

$crypt = new CkCrypt2();

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
$crypt->put_CryptAlgorithm('aes');
$crypt->put_CipherMode('cbc');
$crypt->put_KeyLength(128);
$crypt->SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
$crypt->SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
$crypt->put_EncodingMode('base64');

$ssLogin = new CkSecureString();
$ssPassword = new CkSecureString();

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
$crypt->DecryptSecureENC($json->stringOf('ssh_login'),$ssLogin);
$crypt->DecryptSecureENC($json->stringOf('ssh_password'),$ssPassword);

$tunnel = new CkSshTunnel();

$success = $tunnel->Connect('MY-SSH-SERVER-DOMAIN-OR-IP',22);
if ($success != true) {
    print $tunnel->lastErrorText() . "\n";
    exit;
}

// Authenticate using secure strings
$success = $tunnel->AuthenticateSecPw($ssLogin,$ssPassword);
if ($success != true) {
    print $tunnel->lastErrorText() . "\n";
    exit;
}

print 'SSH Tunnel Authentication successful.' . "\n";

// ...

$tunnel->CloseTunnel(true);

?>