PowerBuilder

SSH HSM Public Key Authentication

See more uncategorized Examples

Demonstrates how to authenticate with an SSH server using public key authentication using an HSM (USB token or smartcard). PowerBuilder

integer li_rc
integer li_Success
oleobject loo_Pkcs11
string ls_Pin
integer li_UserType
oleobject loo_Json
integer li_Priv_handle
integer li_Pub_handle
oleobject loo_Key
string ls_KeyType
oleobject loo_Ssh

li_Success = 0

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Note: Chilkat's PKCS11 implementation runs on Windows, Linux, MacOs, and other supported operating systems.

loo_Pkcs11 = create oleobject
li_rc = loo_Pkcs11.ConnectToNewObject("Chilkat.Pkcs11")
if li_rc < 0 then
    destroy loo_Pkcs11
    MessageBox("Error","Connecting to COM object failed")
    return
end if

// This would be a path to a .dylib on MacOS, or a path to a .so shared lib on Linux.
loo_Pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"
ls_Pin = "0000"
li_UserType = 1

// Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above.
li_Success = loo_Pkcs11.QuickSession(li_UserType,ls_Pin)
if li_Success = 0 then
    Write-Debug loo_Pkcs11.LastErrorText
    destroy loo_Pkcs11
    return
end if

// Set PKCS11 attributes to find our desired private key object.
loo_Json = create oleobject
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

loo_Json.UpdateString("class","private_key")
loo_Json.UpdateString("label","MySshKey")

// Get the PKCS11 handle to the private key located on the HSM.
li_Priv_handle = loo_Pkcs11.FindObject(loo_Json)

// Get the PKCS11 handle to the corresponding public key located on the HSM.
loo_Json.UpdateString("class","public_key")

li_Pub_handle = loo_Pkcs11.FindObject(loo_Json)

loo_Key = create oleobject
li_rc = loo_Key.ConnectToNewObject("Chilkat.SshKey")

// The key type can be "rsa" or "ec"
ls_KeyType = "rsa"
li_Success = loo_Key.UsePkcs11(loo_Pkcs11,li_Priv_handle,li_Pub_handle,ls_KeyType)
if li_Success = 0 then
    Write-Debug loo_Key.LastErrorText
    destroy loo_Pkcs11
    destroy loo_Json
    destroy loo_Key
    return
end if

loo_Ssh = create oleobject
li_rc = loo_Ssh.ConnectToNewObject("Chilkat.Ssh")

li_Success = loo_Ssh.Connect("example.com",22)
if li_Success <> 1 then
    Write-Debug loo_Ssh.LastErrorText
    destroy loo_Pkcs11
    destroy loo_Json
    destroy loo_Key
    destroy loo_Ssh
    return
end if

// Authenticate with the SSH server using the login and
// HSM private key.  (The corresponding public key should've 
// been installed on the SSH server beforehand.)
li_Success = loo_Ssh.AuthenticatePk("myLogin",loo_Key)
if li_Success <> 1 then
    Write-Debug loo_Ssh.LastErrorText
    destroy loo_Pkcs11
    destroy loo_Json
    destroy loo_Key
    destroy loo_Ssh
    return
end if

Write-Debug "Public-Key Authentication Successful!"


destroy loo_Pkcs11
destroy loo_Json
destroy loo_Key
destroy loo_Ssh