Visual FoxPro

SSH Authenticate with a SecureString Password and Private Key

Demonstrates the Chilkat Ssh.AuthenticateSecPwPk method, which performs the same combined password/private-key authentication as AuthenticatePwPk but receives the username and password as SecureString objects. The third argument is the SshKey private key.

Note: The private-key path is relative to the application's current working directory. Supply the path to your own key file.

Background: This is the SecureString form of multi-factor SSH authentication: the password is held encrypted in memory and combined with a private key for servers that require both. It is the most protective option when a deployment mandates two-factor SSH and you also want to minimize plaintext credential exposure in the process.

Chilkat Visual FoxPro Downloads

Download Chilkat for Visual FoxPro

Visual FoxPro

LOCAL lnSuccess
LOCAL loSsh
LOCAL lnSshPort
LOCAL lcPassword
LOCAL loPrivKey
LOCAL lcKeyStr
LOCAL loSecureLogin
LOCAL loSecurePassword

lnSuccess = 0

*  Demonstrates the Ssh.AuthenticateSecPwPk method, which authenticates using SecureString login
*  and password objects together with a private key.  The 1st argument is the username, the 2nd
*  is the password, and the 3rd is an SshKey private key.

loSsh = CreateObject('Chilkat.Ssh')

*  Connect to the SSH server.  Port 22 is the usual SSH port.
lnSshPort = 22
lnSuccess = loSsh.Connect("ssh.example.com",lnSshPort)
IF (lnSuccess = 0) THEN
    ? loSsh.LastErrorText
    RELEASE loSsh
    CANCEL
ENDIF

*  Normally you would not hard-code the password in source.  You should instead obtain it
*  from an interactive prompt, environment variable, or a secrets vault.
lcPassword = "mySshPassword"

*  Load the SSH private key.  LoadText reads the file's text, which is then imported.
loPrivKey = CreateObject('Chilkat.SshKey')
lcKeyStr = loPrivKey.LoadText("qa_data/id_rsa")
IF (loPrivKey.LastMethodSuccess = 0) THEN
    ? loPrivKey.LastErrorText
    RELEASE loSsh
    RELEASE loPrivKey
    CANCEL
ENDIF

lnSuccess = loPrivKey.FromOpenSshPrivateKey(lcKeyStr)
IF (lnSuccess = 0) THEN
    ? loPrivKey.LastErrorText
    RELEASE loSsh
    RELEASE loPrivKey
    CANCEL
ENDIF

*  Place the login and password into SecureString objects.
loSecureLogin = CreateObject('Chilkat.SecureString')
loSecureLogin.Append("mySshLogin")
loSecurePassword = CreateObject('Chilkat.SecureString')
loSecurePassword.Append(lcPassword)

lnSuccess = loSsh.AuthenticateSecPwPk(loSecureLogin,loSecurePassword,loPrivKey)
IF (lnSuccess = 0) THEN
    ? loSsh.LastErrorText
    RELEASE loSsh
    RELEASE loPrivKey
    RELEASE loSecureLogin
    RELEASE loSecurePassword
    CANCEL
ENDIF

? "Authenticated."

loSsh.Disconnect()

RELEASE loSsh
RELEASE loPrivKey
RELEASE loSecureLogin
RELEASE loSecurePassword