(PHP Extension) SFTP use Cert's Private Key for Authentication (Windows)

Demonstrates how to use the private key of a pre-installed certificate (on Windows) for SFTP authentication. The certificate's private key must be marked as "exportable" when originally installed.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$cert = new CkCert();

// Load the certificate from the Windows certificate store
$success = $cert->LoadByCommonName('my_cert_common_name');
if ($success == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

// Get the private key.  
// privKey is a CkPrivateKey
$privKey = $cert->ExportPrivateKey();
if ($cert->get_LastMethodSuccess() == false) {
    print $cert->lastErrorText() . "\n";
    exit;
}

$privKeyPem = $privKey->getPkcs8Pem();
if ($privKey->get_LastMethodSuccess() == false) {
    print $privKey->lastErrorText() . "\n";
    exit;
}

$sshKey = new CkSshKey();
$success = $sshKey->FromOpenSshPrivateKey($privKeyPem);
if ($success == false) {
    print $sshKey->lastErrorText() . "\n";
    exit;
}

// Connect to an SSH/SFTP server
$sftp = new CkSFtp();
$success = $sftp->Connect('sftp.example.com',22);
if ($success == false) {
    print $sftp->lastErrorText() . "\n";
    exit;
}

// Authenticate with the SSH server using a username + private key.
// (The private key serves as the password.  The username identifies
// the SSH user account on the server.)
$success = $sftp->AuthenticatePk('mySshLogin',$sshKey);
if ($success == false) {
    print $sftp->lastErrorText() . "\n";
    exit;
}

print 'OK, the connection and authentication with the SSH server is completed.' . "\n";

// This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...

?>