DataFlex

Set an FTPS Client Certificate from PEM

Demonstrates the Chilkat Ftp2.SetSslClientCertPem method, which configures a client certificate and private key from PEM. The first argument may be the PEM text or a PEM file path, and the second is the private-key password (empty when the key is not encrypted).

Note: The local paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: This is the PEM-based form of setting the mutual-TLS client certificate — convenient when the certificate and key already live in a .pem file, the common format from OpenSSH and Unix tooling. Use SetSslClientCertPfx instead for a PKCS#12 .pfx/.p12 bundle. As with any client certificate, set it before connecting.

Chilkat DataFlex Downloads

Download Chilkat for DataFlex

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoFtp
    String sPemPassword
    String sTemp1

    Move False To iSuccess

    //  Demonstrates the Ftp2.SetSslClientCertPem method, which configures a client certificate and
    //  private key from PEM.  The 1st argument is the PEM text or a PEM file path, and the 2nd is the
    //  private-key password (empty when the key is not encrypted).

    Get Create (RefClass(cComChilkatFtp2)) To hoFtp
    If (Not(IsComObjectCreated(hoFtp))) Begin
        Send CreateComObject of hoFtp
    End

    Set ComHostname Of hoFtp To "ftp.example.com"
    Set ComUsername Of hoFtp To "myFtpLogin"

    //  Normally you would not hard-code the password in source.  You should instead obtain it
    //  from an interactive prompt, environment variable, or a secrets vault.
    Set ComPassword Of hoFtp To "myPassword"

    //  Use explicit FTPS (AUTH TLS) on the standard FTP port.
    Set ComAuthTls Of hoFtp To True

    //  Provide the PEM client certificate before connecting.  The password should come from a secure
    //  source rather than being hard-coded.
    Move "myPemPassword" To sPemPassword
    Get ComSetSslClientCertPem Of hoFtp "qa_data/client.pem" sPemPassword To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoFtp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComConnect Of hoFtp To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoFtp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Connected with a PEM client certificate."

    Get ComDisconnect Of hoFtp To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoFtp To sTemp1
        Showln sTemp1
        Procedure_Return
    End



End_Procedure