DataFlex

SSH Tunnel Authenticate with a Private Key

Demonstrates the Chilkat SshTunnel.AuthenticatePk method, which authenticates the SSH connection using public-key authentication. The first argument is the username and the second is an SshKey private key. The matching public key must already be installed for the account on the SSH server.

Note: The private-key path is relative to the application's current working directory. Absolute paths may also be used. Supply the path to your own key file.

Background: Public-key authentication suits tunnels especially well because they typically run unattended for long periods: the private key stays on the client, the server trusts the corresponding public key, and no reusable password crosses the wire. The SshKey object imports several formats; for an encrypted key, set its Password before importing.

Chilkat DataFlex Downloads

Download Chilkat for DataFlex

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoTunnel
    Integer iSshPort
    Variant vPrivKey
    Handle hoPrivKey
    String sKeyText
    Boolean iWaitForThreadExit
    String sTemp1
    Boolean bTemp1

    Move False To iSuccess

    //  Demonstrates the SshTunnel.AuthenticatePk method, which authenticates the SSH connection using
    //  public-key authentication.  The 1st argument is the username and the 2nd is an SshKey private
    //  key.  The matching public key must already be installed for the account on the SSH server.

    Get Create (RefClass(cComChilkatSshTunnel)) To hoTunnel
    If (Not(IsComObjectCreated(hoTunnel))) Begin
        Send CreateComObject of hoTunnel
    End

    //  The tunnel forwards accepted local connections to this destination through the SSH server.
    Set ComDestHostname Of hoTunnel To "db.internal.example.com"
    Set ComDestPort Of hoTunnel To 5432

    //  Connect to the SSH server.  This performs the TCP/proxy connection and SSH handshake, but
    //  does not authenticate yet.
    Move 22 To iSshPort
    Get ComConnect Of hoTunnel "ssh.example.com" iSshPort To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoTunnel To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    //  Load the SSH private key.  LoadText reads the file's text, which is then imported.
    Get Create (RefClass(cComChilkatSshKey)) To hoPrivKey
    If (Not(IsComObjectCreated(hoPrivKey))) Begin
        Send CreateComObject of hoPrivKey
    End
    Get ComLoadText Of hoPrivKey "qa_data/id_rsa" To sKeyText
    Get ComLastMethodSuccess Of hoPrivKey To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoPrivKey To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComFromOpenSshPrivateKey Of hoPrivKey sKeyText To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoPrivKey To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get pvComObject of hoPrivKey to vPrivKey
    Get ComAuthenticatePk Of hoTunnel "mySshLogin" vPrivKey To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoTunnel To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "Authenticated with a private key."

    //  After authenticating, call BeginAccepting to start listening for local connections to forward.

    Move True To iWaitForThreadExit
    Get ComCloseTunnel Of hoTunnel iWaitForThreadExit To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoTunnel To sTemp1
        Showln sTemp1
        Procedure_Return
    End



End_Procedure