Classic ASP

SFTP Authentication using X.509 Certificates

Demonstrates how to authenticate with an SSH/SFTP server using an certificate's private key.

Note: See X.509v3 Certificates for SSH Authentication for more information.

Chilkat Classic ASP Downloads

Classic ASP

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
success = 0

' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

set sftp = Server.CreateObject("Chilkat.SFtp")

hostname = "sftp.example.com"
port = 22
success = sftp.Connect(hostname,port)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( sftp.LastErrorText) & "</pre>"
    Response.End
End If

' Load the cert + private key from a .pfx.
' Note: Chilkat provides methods for loading certs and private keys from many sources, including smart cards and USB tokens (HSM's)
set cert = Server.CreateObject("Chilkat.Cert")
success = cert.LoadPfxFile("qa_data/pfx/example.pfx","pfx_password")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' Get the cert's private key (as PEM) to be used for SSH authentication.
' (The public key is installed on the server.)
privKeyPem = cert.GetPrivateKeyPem()
If (cert.LastMethodSuccess = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

set key = Server.CreateObject("Chilkat.SshKey")

' Load a private key from a PEM string:
success = key.FromOpenSshPrivateKey(privKeyPem)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( key.LastErrorText) & "</pre>"
    Response.End
End If

' Authenticate with the SSH server.
success = sftp.AuthenticatePk("myLogin",key)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( sftp.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( "Public-Key Authentication Successful!") & "</pre>"

%>
</body>
</html>