(PowerShell) Verify FTP SSL Server Certificate

This example demonstrates how to verify the FTP server's certificate and authenticity. The intent is to verify the authenticity of the server before passing a login/password to it.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

$success = $false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$ftp = New-Object Chilkat.Ftp2

$ftp.Hostname = "ftp.myftpserver.com"
$ftp.Username = "myUsername"
$ftp.Password = "myPassword"

# Establish an AUTH SSL secure channel after connection
# on the standard FTP port 21.
$ftp.AuthSsl = $true

# The Ssl property is for establishing an implicit SSL connection
# on port 990.  Do not set it.
$ftp.Ssl = $false

# Indicate that the FTP server must have a verifiable SSL certificate.
# Do not accept self-signed certs or certificates that are
# expired, revoked, or cannot be verified to a root authority:
$ftp.RequireSslCertVerify = $true

# You may also set a requirement.  In this example,
# the certificate's Common Name (CN) must match the
# required string exactly:
$ftp.SetSslCertRequirement("subjectcn","Chilkat Software, Inc.")

# Connect and login to the FTP server.
$success = $ftp.Connect()
if ($success -eq $false) {
    $($ftp.LastErrorText)
    exit
}

# After logging on, you may examine the FTP server's cert:
$cert = New-Object Chilkat.Cert
$success = $ftp.GetServerCert($cert)
if ($success -eq $false) {
    $("No server certificate!")
}
else {
    # Display the distinguished name of the SSL cert.
    $($cert.SubjectDN)
}

$("Secure FTP Channel Established!")

# Do whatever you're doing to do ...
# upload files, download files, etc...

$success = $ftp.Disconnect()