(Tcl) SFTP Public-Key Authentication (id_ed25519)

See more SFTP Examples

Demonstrates how to authenticate with an SSH/SFTP server using publickey authentication with an Ed25519 private key (id_ed25519).

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set key [new_CkSshKey]

# The id_ed25519 file should contain something like this:
# (You can open it in a text editor..)

# -----BEGIN OPENSSH PRIVATE KEY-----
# b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDIeK9+Xw
# 6Do9gnhtrJu5iJAAAAZAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIMh/Ge7fjQCssmVd
# BqjYZbRAI0pY8IrnB6J1yLetq34OAAAAoMVP7cvy4hTiAINA3I4v55OonkpKza8mzfUW18
# RDQeYL3ovCVaAYOGcCpf/SW3QiY6tnXq+5WDEfJ7Z/kQ0nl2+1wSLOytxpyO+IY0rRtLrX
# 6e/agR4nbZpt/MFG6xqcNASbtDgg+9IWGvDrtXOLFofx07/zml+UjFL0tXRpCjOxeqKyXH
# t8SRgdT97d9/bYPwapaXY+b2DVVy5/LVx4Sq8=
# -----END OPENSSH PRIVATE KEY-----

set privKeyText [CkSshKey_loadText $key "c:/temp/id_ed25519"]
if {[CkSshKey_get_LastMethodSuccess $key] != 1} then {
    puts [CkSshKey_lastErrorText $key]
    delete_CkSshKey $key
    exit
}

# If your private key was saved encrypted, then you'll need the password.
# In this example, the password "blahblah" is valid for the above key -- which is a real Ed25519 key generated/saved from puttygen.
CkSshKey_put_Password $key "blahblah"

set success [CkSshKey_FromOpenSshPrivateKey $key $privKeyText]
if {$success != 1} then {
    puts [CkSshKey_lastErrorText $key]
    delete_CkSshKey $key
    exit
}

set sftp [new_CkSFtp]

# Set some timeouts, in milliseconds:
CkSFtp_put_ConnectTimeoutMs $sftp 5000
CkSFtp_put_IdleTimeoutMs $sftp 15000

set hostname "sftp.example.com"
set port 22
set success [CkSFtp_Connect $sftp $hostname $port]
if {$success != 1} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkSshKey $key
    delete_CkSFtp $sftp
    exit
}

# Authenticate with the SSH server.  Chilkat SFTP supports
# both password-based authenication as well as public-key
# authentication.  
set success [CkSFtp_AuthenticatePk $sftp "myLogin" $key]
if {$success != 1} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkSshKey $key
    delete_CkSFtp $sftp
    exit
}

puts [CkSFtp_lastErrorText $sftp]
puts "Public-Key Authentication Successful!"

# Now go do whatever you're app needs to do...

delete_CkSshKey $key
delete_CkSFtp $sftp