Objective-C

Secure FTP with Client Certificate

See more FTP Examples

Chilkat FTP2 provides the ability to use a client certificate with secure FTP (implicit or explicit SSL/TLS). This example demonstrates how to load a certificate from a .pfx and use it as the client-side SSL cert. Note: Client-side certificates are only needed in situations where the server demands one. Objective-C

#import <CkoFtp2.h>
#import <CkoCertStore.h>
#import <NSString.h>
#import <CkoJsonObject.h>
#import <CkoCert.h>

BOOL success = NO;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoFtp2 *ftp = [[CkoFtp2 alloc] init];

ftp.Hostname = @"ftp.example.com";
ftp.Port = [NSNumber numberWithInt:21];
ftp.Username = @"test";
ftp.Password = @"test";

// This example will use explict TLS/SSL.
// Establish an explicit secure channel after connection
// on the standard FTP port 21.
ftp.AuthTls = YES;

// The Ssl property is for establishing an implicit SSL connection
// on port 990.  Because this example uses explicit SSL, it 
// should remain NO.
ftp.Ssl = NO;

// Load a certificate from a .pfx
// A PFX may contain several certs, including the certificates
// in a chain of authority.
CkoCertStore *certStore = [[CkoCertStore alloc] init];
NSString *password = 0;
password = @"***";
// Load the certs from a PFX into an in-memory certificate store:
success = [certStore LoadPfxFile: @"chilkat.pfx" password: password];
if (success != YES) {
    NSLog(@"%@",certStore.LastErrorText);
    return;
}

// Find the desired certificate.
CkoJsonObject *jsonCN = [[CkoJsonObject alloc] init];
[jsonCN UpdateString: @"CN" value: @"cert common name"];

CkoCert *cert = [[CkoCert alloc] init];
success = [certStore FindCert: jsonCN cert: cert];
if (success == NO) {
    NSLog(@"%@",@"Certificate not found!");
    return;
}

// Use this certificate for our secure (SSL/TLS) connection:
success = [ftp SetSslClientCert: cert];

// Connect and login to the FTP server.  The connection is 
// made secure because of the AuthTls setting.
success = [ftp Connect];
if (success != YES) {
    NSLog(@"%@",ftp.LastErrorText);
    return;
}
else {
    // LastErrorText contains information even when
    // successful. This allows you to visually verify
    // that the secure connection actually occurred.
    NSLog(@"%@",ftp.LastErrorText);
}

NSLog(@"%@",@"Secure FTP Channel Established!");

// Do whatever you're doing to do ...
// upload files, download files, etc...

// .....
// .....

success = [ftp Disconnect];