(JavaScript) SFTP use Cert's Private Key from PFX (.pfx/.p12)

Demonstrates how to use the private key associated with a certificate from a .pfx/.p12 file.

Note: This example requires Chilkat v11.0.0 or greater.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

var success = false;

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var cert = new CkCert();

var pfxFilepath = "qa_data/pfx/my.pfx";
var pfxPassword = "secret";

// A PFX typically contains certificates in the chain of authentication.
// The Chilkat cert object will choose the certificate w/
// private key farthest from the root authority cert.
// To access all the certificates in a PFX, use the 
// Chilkat certificate store object instead.
success = cert.LoadPfxFile(pfxFilepath,pfxPassword);
if (success == false) {
    console.log(cert.LastErrorText);
    return;
}

// Get the private key.  
var privKey = new CkPrivateKey();
success = cert.GetPrivateKey(privKey);
if (success == false) {
    console.log(cert.LastErrorText);
    return;
}

var privKeyPem = privKey.GetPkcs8Pem();
if (privKey.LastMethodSuccess == false) {
    console.log(privKey.LastErrorText);
    return;
}

var sshKey = new CkSshKey();
success = sshKey.FromOpenSshPrivateKey(privKeyPem);
if (success == false) {
    console.log(sshKey.LastErrorText);
    return;
}

// Connect to an SSH/SFTP server
var sftp = new CkSFtp();
success = sftp.Connect("sftp.example.com",22);
if (success == false) {
    console.log(sftp.LastErrorText);
    return;
}

// Authenticate with the SSH server using a username + private key.
// (The private key serves as the password.  The username identifies
// the SSH user account on the server.)
success = sftp.AuthenticatePk("mySshLogin",sshKey);
if (success == false) {
    console.log(sftp.LastErrorText);
    return;
}

console.log("OK, the connection and authentication with the SSH server is completed.");

// This example is only to show the connection + authentication using a private key associated with a certificate in the Windows certificate store...