Rust

SSH Public Key Authentication

Demonstrates authenticating with an SSH server using public-key authentication. A private key is loaded into an SshKey object and passed to AuthenticatePk. The matching public key must already be installed on the server for the account.

Note: The private-key path is relative to the application's current working directory. Supply the path to your own key file.

Background: Public-key authentication is the standard for unattended and automated SSH: the private key never leaves the client, the server merely trusts the corresponding public key, and no reusable password crosses the wire. SshKey imports several formats — OpenSSH PEM keys via FromOpenSshPrivateKey and PuTTY .ppk files via FromPuttyPrivateKey — encrypted or not. For an encrypted key, set the Password property before importing. Note that LoadText is only a convenience for reading a text file into a string; it does not itself load the key.

Chilkat Rust Downloads

Download Chilkat for Rust

Rust


// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Demonstrates authenticating with an SSH server using public-key authentication.  The matching
// public key must already be installed on the SSH server for the account.

let ssh = chilkat::Ssh::new();

// Timeouts, in milliseconds.
ssh.set_connect_timeout_ms(5000);
ssh.set_read_timeout_ms(15000);

let hostname = "ssh.example.com".to_string();
let port = 22;
if ssh.connect(&hostname, port).is_err() {
    println!("{}", ssh.last_error_text());
    return;
}

// LoadText is a convenience method that reads any text file into a string.  It does not itself
// load the key.
let key = chilkat::SshKey::new();
let Ok(priv_key_text) = key.load_text("qa_data/my_private_key.pem") else {
    println!("{}", key.last_error_text());
    return;
};

// Import the private key.  Both OpenSSH and PuTTY formats are supported, encrypted or not.
// This example loads an unencrypted OpenSSH-format key; for a PuTTY .ppk file, call
// FromPuttyPrivateKey instead.  For an encrypted key, set key.Password before importing.
if key.from_open_ssh_private_key(&priv_key_text).is_err() {
    println!("{}", key.last_error_text());
    return;
}

if ssh.authenticate_pk("mySshLogin", &key).is_err() {
    println!("{}", ssh.last_error_text());
    return;
}

println!("Public-key authentication successful.");

ssh.disconnect();