(CkPython) SFTP Authentication using X.509 Certificates

See more SFTP Examples

Demonstrates how to authenticate with an SSH/SFTP server using an certificate's private key.

Note: See X.509v3 Certificates for SSH Authentication for more information.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

sftp = chilkat.CkSFtp()

hostname = "sftp.example.com"
port = 22
success = sftp.Connect(hostname,port)
if (success != True):
    print(sftp.lastErrorText())
    sys.exit()

# Load the cert + private key from a .pfx.
# Note: Chilkat provides methods for loading certs and private keys from many sources, including smart cards and USB tokens (HSM's)
cert = chilkat.CkCert()
success = cert.LoadPfxFile("qa_data/pfx/example.pfx","pfx_password")
if (success != True):
    print(cert.lastErrorText())
    sys.exit()

# Get the cert's private key (as PEM) to be used for SSH authentication.
# (The public key is installed on the server.)
privKeyPem = cert.getPrivateKeyPem()
if (cert.get_LastMethodSuccess() == False):
    print(cert.lastErrorText())
    sys.exit()

key = chilkat.CkSshKey()

# Load a private key from a PEM string:
success = key.FromOpenSshPrivateKey(privKeyPem)
if (success != True):
    print(key.lastErrorText())
    sys.exit()

# Authenticate with the SSH server.
success = sftp.AuthenticatePk("myLogin",key)
if (success != True):
    print(sftp.lastErrorText())
    sys.exit()

print("Public-Key Authentication Successful!")