(CkPython) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat.CkCert()

pfxFilepath = "qa_data/pfx/my.pfx"
pfxPassword = "secret"

# A PFX typically contains certificates in the chain of authentication.
# The Chilkat cert object will choose the certificate w/
# private key farthest from the root authority cert.
# To access all the certificates in a PFX, use the 
# Chilkat certificate store object instead.
success = cert.LoadPfxFile(pfxFilepath,pfxPassword)
if (success != True):
    print(cert.lastErrorText())
    sys.exit()

# Get the private key.  
# privKey is a CkPrivateKey
privKey = cert.ExportPrivateKey()
if (cert.get_LastMethodSuccess() == False):
    print(cert.lastErrorText())
    sys.exit()

privKeyPem = privKey.getPkcs8Pem()
if (privKey.get_LastMethodSuccess() == False):
    print(privKey.lastErrorText())
    sys.exit()

sshKey = chilkat.CkSshKey()
success = sshKey.FromOpenSshPrivateKey(privKeyPem)
if (success == False):
    print(sshKey.lastErrorText())
    sys.exit()

# Connect to an SSH/SFTP server
sftp = chilkat.CkSFtp()
success = sftp.Connect("sftp.example.com",22)
if (success == False):
    print(sftp.lastErrorText())
    sys.exit()

# Authenticate with the SSH server using a username + private key.
# (The private key serves as the password.  The username identifies
# the SSH user account on the server.)
success = sftp.AuthenticatePk("mySshLogin",sshKey)
if (success == False):
    print(sftp.lastErrorText())
    sys.exit()

print("OK, the connection and authentication with the SSH server is completed.")

# This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...