(Tcl) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set cert [new_CkCert]

set pfxFilepath "qa_data/pfx/my.pfx"
set pfxPassword "secret"

# A PFX typically contains certificates in the chain of authentication.
# The Chilkat cert object will choose the certificate w/
# private key farthest from the root authority cert.
# To access all the certificates in a PFX, use the 
# Chilkat certificate store object instead.
set success [CkCert_LoadPfxFile $cert $pfxFilepath $pfxPassword]
if {$success != 1} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

# Get the private key.  
# privKey is a CkPrivateKey
set privKey [CkCert_ExportPrivateKey $cert]
if {[CkCert_get_LastMethodSuccess $cert] == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

set privKeyPem [CkPrivateKey_getPkcs8Pem $privKey]
if {[CkPrivateKey_get_LastMethodSuccess $privKey] == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkCert $cert
    exit
}

set sshKey [new_CkSshKey]

set success [CkSshKey_FromOpenSshPrivateKey $sshKey $privKeyPem]
if {$success == 0} then {
    puts [CkSshKey_lastErrorText $sshKey]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    exit
}

# Connect to an SSH/SFTP server
set sftp [new_CkSFtp]

set success [CkSFtp_Connect $sftp "sftp.example.com" 22]
if {$success == 0} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    delete_CkSFtp $sftp
    exit
}

# Authenticate with the SSH server using a username + private key.
# (The private key serves as the password.  The username identifies
# the SSH user account on the server.)
set success [CkSFtp_AuthenticatePk $sftp "mySshLogin" $sshKey]
if {$success == 0} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    delete_CkSFtp $sftp
    exit
}

puts "OK, the connection and authentication with the SSH server is completed."

# This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...

delete_CkCert $cert
delete_CkSshKey $sshKey
delete_CkSFtp $sftp