SQL Server

Verify FTP SSL Server Certificate

See more FTP Examples

This example demonstrates how to verify the FTP server's certificate and authenticity. The intent is to verify the authenticity of the server before passing a login/password to it. SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @ftp int
    EXEC @hr = sp_OACreate 'Chilkat.Ftp2', @ftp OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    EXEC sp_OASetProperty @ftp, 'Hostname', 'ftp.myftpserver.com'
    EXEC sp_OASetProperty @ftp, 'Username', 'myUsername'
    EXEC sp_OASetProperty @ftp, 'Password', 'myPassword'

    -- Establish an AUTH SSL secure channel after connection
    -- on the standard FTP port 21.
    EXEC sp_OASetProperty @ftp, 'AuthSsl', 1

    -- The Ssl property is for establishing an implicit SSL connection
    -- on port 990.  Do not set it.
    EXEC sp_OASetProperty @ftp, 'Ssl', 0

    -- Indicate that the FTP server must have a verifiable SSL certificate.
    -- Do not accept self-signed certs or certificates that are
    -- expired, revoked, or cannot be verified to a root authority:
    EXEC sp_OASetProperty @ftp, 'RequireSslCertVerify', 1

    -- You may also set a requirement.  In this example,
    -- the certificate's Common Name (CN) must match the
    -- required string exactly:
    EXEC sp_OAMethod @ftp, 'SetSslCertRequirement', NULL, 'subjectcn', 'Chilkat Software, Inc.'

    -- Connect and login to the FTP server.
    EXEC sp_OAMethod @ftp, 'Connect', @success OUT
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @ftp, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @ftp
        RETURN
      END

    -- After logging on, you may examine the FTP server's cert:
    DECLARE @cert int
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT

    EXEC sp_OAMethod @ftp, 'GetServerCert', @success OUT, @cert
    IF @success = 0
      BEGIN

        PRINT 'No server certificate!'
      END
    ELSE
      BEGIN
        -- Display the distinguished name of the SSL cert.
        EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT
        PRINT @sTmp0
      END


    PRINT 'Secure FTP Channel Established!'

    -- Do whatever you're doing to do ...
    -- upload files, download files, etc...

    EXEC sp_OAMethod @ftp, 'Disconnect', @success OUT

    EXEC @hr = sp_OADestroy @ftp
    EXEC @hr = sp_OADestroy @cert


END
GO