(Swift 2) SSH Tunnel Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var success: Bool

    // Imagine we've previously saved our encrypted login and password within a JSON config file
    // that contains this:

    // {
    //   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
    //   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
    // }

    let json = CkoJsonObject()
    json.LoadFile("qa_data/passwords/ssh.json")

    let crypt = CkoCrypt2()

    // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
    crypt.CryptAlgorithm = "aes"
    crypt.CipherMode = "cbc"
    crypt.KeyLength = 128
    crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F", encoding: "hex")
    crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F", encoding: "hex")
    crypt.EncodingMode = "base64"

    let ssLogin = CkoSecureString()
    let ssPassword = CkoSecureString()

    // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
    // a randomly generated session key.)
    crypt.DecryptSecureENC(json.StringOf("ssh_login"), secureStr: ssLogin)
    crypt.DecryptSecureENC(json.StringOf("ssh_password"), secureStr: ssPassword)

    let tunnel = CkoSshTunnel()

    success = tunnel.Connect("MY-SSH-SERVER-DOMAIN-OR-IP", port: 22)
    if success != true {
        print("\(tunnel.LastErrorText)")
        return
    }

    // Authenticate using secure strings
    success = tunnel.AuthenticateSecPw(ssLogin, password: ssPassword)
    if success != true {
        print("\(tunnel.LastErrorText)")
        return
    }

    print("SSH Tunnel Authentication successful.")

    // ...

    tunnel.CloseTunnel(true)

}