CkPython

Secure FTP with Client Certificate

See more FTP Examples

Chilkat FTP2 provides the ability to use a client certificate with secure FTP (implicit or explicit SSL/TLS). This example demonstrates how to load a certificate from a .pfx and use it as the client-side SSL cert. Note: Client-side certificates are only needed in situations where the server demands one. CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

ftp = chilkat.CkFtp2()

ftp.put_Hostname("ftp.example.com")
ftp.put_Port(21)
ftp.put_Username("test")
ftp.put_Password("test")

# This example will use explict TLS/SSL.
# Establish an explicit secure channel after connection
# on the standard FTP port 21.
ftp.put_AuthTls(True)

# The Ssl property is for establishing an implicit SSL connection
# on port 990.  Because this example uses explicit SSL, it 
# should remain False.
ftp.put_Ssl(False)

# Load a certificate from a .pfx
# A PFX may contain several certs, including the certificates
# in a chain of authority.
certStore = chilkat.CkCertStore()

password = "***"
# Load the certs from a PFX into an in-memory certificate store:
success = certStore.LoadPfxFile("chilkat.pfx",password)
if (success != True):
    print(certStore.lastErrorText())
    sys.exit()

# Find the desired certificate.
jsonCN = chilkat.CkJsonObject()
jsonCN.UpdateString("CN","cert common name")

cert = chilkat.CkCert()
success = certStore.FindCert(jsonCN,cert)
if (success == False):
    print("Certificate not found!")
    sys.exit()

# Use this certificate for our secure (SSL/TLS) connection:
success = ftp.SetSslClientCert(cert)

# Connect and login to the FTP server.  The connection is 
# made secure because of the AuthTls setting.
success = ftp.Connect()
if (success != True):
    print(ftp.lastErrorText())
    sys.exit()
else:
    # LastErrorText contains information even when
    # successful. This allows you to visually verify
    # that the secure connection actually occurred.
    print(ftp.lastErrorText())

print("Secure FTP Channel Established!")

# Do whatever you're doing to do ...
# upload files, download files, etc...

# .....
# .....

success = ftp.Disconnect()