(Tcl) SFTP use Cert's Private Key for Authentication (Windows)

Demonstrates how to use the private key of a pre-installed certificate (on Windows) for SFTP authentication. The certificate's private key must be marked as "exportable" when originally installed.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set cert [new_CkCert]

# Load the certificate from the Windows certificate store
set success [CkCert_LoadByCommonName $cert "my_cert_common_name"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

# Get the private key.  
# privKey is a CkPrivateKey
set privKey [CkCert_ExportPrivateKey $cert]
if {[CkCert_get_LastMethodSuccess $cert] == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

set privKeyPem [CkPrivateKey_getPkcs8Pem $privKey]
if {[CkPrivateKey_get_LastMethodSuccess $privKey] == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkCert $cert
    exit
}

set sshKey [new_CkSshKey]

set success [CkSshKey_FromOpenSshPrivateKey $sshKey $privKeyPem]
if {$success == 0} then {
    puts [CkSshKey_lastErrorText $sshKey]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    exit
}

# Connect to an SSH/SFTP server
set sftp [new_CkSFtp]

set success [CkSFtp_Connect $sftp "sftp.example.com" 22]
if {$success == 0} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    delete_CkSFtp $sftp
    exit
}

# Authenticate with the SSH server using a username + private key.
# (The private key serves as the password.  The username identifies
# the SSH user account on the server.)
set success [CkSFtp_AuthenticatePk $sftp "mySshLogin" $sshKey]
if {$success == 0} then {
    puts [CkSFtp_lastErrorText $sftp]
    delete_CkCert $cert
    delete_CkSshKey $sshKey
    delete_CkSFtp $sftp
    exit
}

puts "OK, the connection and authentication with the SSH server is completed."

# This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...

delete_CkCert $cert
delete_CkSshKey $sshKey
delete_CkSFtp $sftp