Verify FTP SSL Server Certificate

Download 32-bit Chilkat FTP2 ActiveX (.msi)

Download All 32-bit Chilkat ActiveX Components (.zip)

Download All 64-bit Chilkat ActiveX Components (.zip)

This example demonstrates how to verify the FTP server's certificate and authenticity. The intent is to verify the authenticity of the server before passing a login/password to it.

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
set ftp = Server.CreateObject("Chilkat.Ftp2")

'  Any string unlocks the component for the 1st 30-days.
success = ftp.UnlockComponent("Anything for 30-day trial")
If (success <> 1) Then
    Response.Write Server.HtmlEncode(ftp.LastErrorText) & "<br>"

End If

ftp.Hostname = "ftp.myftpserver.com"
ftp.Username = "myUsername"
ftp.Password = "myPassword"

'  Establish an AUTH SSL secure channel after connection
'  on the standard FTP port 21.
ftp.AuthSsl = 1

'  The Ssl property is for establishing an implicit SSL connection
'  on port 990.  Do not set it.
ftp.Ssl = 0

'  Indicate that the FTP server must have a verifiable SSL certificate.
'  Do not accept self-signed certs or certificates that are
'  expired, revoked, or cannot be verified to a root authority:
ftp.RequireSslCertVerify = 1

'  You may also set a requirement.  In this example,
'  the certificate's Common Name (CN) must match the
'  required string exactly:
ftp.SetSslCertRequirement "subjectcn","Chilkat Software, Inc."

'  Connect and login to the FTP server.
success = ftp.Connect()
If (success <> 1) Then
    Response.Write Server.HtmlEncode(ftp.LastErrorText) & "<br>"

Else
    '  LastErrorText contains information even when
    '  successful. This allows you to visually verify
    '  that the secure connection actually occurred.
    Response.Write Server.HtmlEncode(ftp.LastErrorText) & "<br>"
End If

'  After logging on, you may examine the FTP server's cert:

Set cert = ftp.GetSslServerCert()
If (cert Is Nothing ) Then
    Response.Write Server.HtmlEncode("No server certificate!") & "<br>"
Else
    '  Display the distinguished name of the SSL cert.
    Response.Write Server.HtmlEncode(cert.SubjectDN) & "<br>"
End If

Response.Write Server.HtmlEncode("Secure FTP Channel Established!") & "<br>"

'  Do whatever you're doing to do ...
'  upload files, download files, etc...

ftp.Disconnect 
%>
</body>
</html>