Visual FoxPro

SSH Tunnel Authenticate with a SecureString Password and Private Key

Demonstrates the Chilkat SshTunnel.AuthenticateSecPwPk method, which authenticates using SecureString login and password objects together with a private key. The third argument is the SshKey private key.

Note: The private-key path is relative to the application's current working directory. Absolute paths may also be used. Supply the path to your own key file.

Background: This is the SecureString form of two-factor tunnel authentication: the password is held encrypted in memory and combined with a private key for servers that require both. It is the most protective option when a deployment mandates two-factor SSH and you also want to minimize plaintext credential exposure in a long-running process.

Chilkat Visual FoxPro Downloads

Download Chilkat for Visual FoxPro

Visual FoxPro

LOCAL lnSuccess
LOCAL loTunnel
LOCAL lnSshPort
LOCAL lcPassword
LOCAL loPrivKey
LOCAL lcKeyText
LOCAL loSecureLogin
LOCAL loSecurePassword
LOCAL lnWaitForThreadExit

lnSuccess = 0

*  Demonstrates the SshTunnel.AuthenticateSecPwPk method, which authenticates using SecureString
*  login and password objects together with a private key.  The 1st argument is the username, the
*  2nd is the password, and the 3rd is an SshKey private key.

loTunnel = CreateObject('Chilkat.SshTunnel')

*  The tunnel forwards accepted local connections to this destination through the SSH server.
loTunnel.DestHostname = "db.internal.example.com"
loTunnel.DestPort = 5432

*  Connect to the SSH server.  This performs the TCP/proxy connection and SSH handshake, but
*  does not authenticate yet.
lnSshPort = 22
lnSuccess = loTunnel.Connect("ssh.example.com",lnSshPort)
IF (lnSuccess = 0) THEN
    ? loTunnel.LastErrorText
    RELEASE loTunnel
    CANCEL
ENDIF

*  Normally you would not hard-code the password in source.  You should instead obtain it
*  from an interactive prompt, environment variable, or a secrets vault.
lcPassword = "mySshPassword"

*  Load the SSH private key.  LoadText reads the file's text, which is then imported.
loPrivKey = CreateObject('Chilkat.SshKey')
lcKeyText = loPrivKey.LoadText("qa_data/id_rsa")
IF (loPrivKey.LastMethodSuccess = 0) THEN
    ? loPrivKey.LastErrorText
    RELEASE loTunnel
    RELEASE loPrivKey
    CANCEL
ENDIF

lnSuccess = loPrivKey.FromOpenSshPrivateKey(lcKeyText)
IF (lnSuccess = 0) THEN
    ? loPrivKey.LastErrorText
    RELEASE loTunnel
    RELEASE loPrivKey
    CANCEL
ENDIF

*  Place the login and password into SecureString objects.
loSecureLogin = CreateObject('Chilkat.SecureString')
loSecureLogin.Append("mySshLogin")
loSecurePassword = CreateObject('Chilkat.SecureString')
loSecurePassword.Append(lcPassword)

lnSuccess = loTunnel.AuthenticateSecPwPk(loSecureLogin,loSecurePassword,loPrivKey)
IF (lnSuccess = 0) THEN
    ? loTunnel.LastErrorText
    RELEASE loTunnel
    RELEASE loPrivKey
    RELEASE loSecureLogin
    RELEASE loSecurePassword
    CANCEL
ENDIF

? "Authenticated."

*  After authenticating, call BeginAccepting to start listening for local connections to forward.

lnWaitForThreadExit = 1
lnSuccess = loTunnel.CloseTunnel(lnWaitForThreadExit)
IF (lnSuccess = 0) THEN
    ? loTunnel.LastErrorText
    RELEASE loTunnel
    RELEASE loPrivKey
    RELEASE loSecureLogin
    RELEASE loSecurePassword
    CANCEL
ENDIF

RELEASE loTunnel
RELEASE loPrivKey
RELEASE loSecureLogin
RELEASE loSecurePassword