(Swift) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Note: This example requires Chilkat v11.0.0 or greater.

Chilkat Downloads for the Swift Programming Language MAC OS X (Cocoa) Objective-C/Swift Libs iOS Objective-C/Swift Libs

func chilkatTest() {
    var success: Bool = false

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let cert = CkoCert()!

    var pfxFilepath: String? = "qa_data/pfx/my.pfx"
    var pfxPassword: String? = "secret"

    // A PFX typically contains certificates in the chain of authentication.
    // The Chilkat cert object will choose the certificate w/
    // private key farthest from the root authority cert.
    // To access all the certificates in a PFX, use the 
    // Chilkat certificate store object instead.
    success = cert.loadPfxFile(pfxFilepath, password: pfxPassword)
    if success == false {
        print("\(cert.lastErrorText!)")
        return
    }

    // Get the private key.  
    let privKey = CkoPrivateKey()!
    success = cert.get(privKey)
    if success == false {
        print("\(cert.lastErrorText!)")
        return
    }

    var privKeyPem: String? = privKey.getPkcs8Pem()
    if privKey.lastMethodSuccess == false {
        print("\(privKey.lastErrorText!)")
        return
    }

    let sshKey = CkoSshKey()!
    success = sshKey.fromOpenSshPrivateKey(privKeyPem)
    if success == false {
        print("\(sshKey.lastErrorText!)")
        return
    }

    // Connect to an SSH/SFTP server
    let sftp = CkoSFtp()!
    success = sftp.connect("sftp.example.com", port: 22)
    if success == false {
        print("\(sftp.lastErrorText!)")
        return
    }

    // Authenticate with the SSH server using a username + private key.
    // (The private key serves as the password.  The username identifies
    // the SSH user account on the server.)
    success = sftp.authenticatePk("mySshLogin", privateKey: sshKey)
    if success == false {
        print("\(sftp.lastErrorText!)")
        return
    }

    print("OK, the connection and authentication with the SSH server is completed.")

    // This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...

}