Objective-C

SFTP Authenticate Secure

Demonstrates how to do SFTP password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Objective-C

#import <CkoJsonObject.h>
#import <CkoCrypt2.h>
#import <CkoSecureString.h>
#import <CkoSFtp.h>

BOOL success = NO;

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Imagine we've previously saved our encrypted login and password within a JSON config file
//  that contains this:

//  {
//    "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//    "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
//  }

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json LoadFile: @"qa_data/passwords/ssh.json"];

CkoCrypt2 *crypt = [[CkoCrypt2 alloc] init];

//  These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.CryptAlgorithm = @"aes";
crypt.CipherMode = @"cbc";
crypt.KeyLength = [NSNumber numberWithInt:128];
[crypt SetEncodedKey: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
[crypt SetEncodedIV: @"000102030405060708090A0B0C0D0E0F" encoding: @"hex"];
crypt.EncodingMode = @"base64";

CkoSecureString *ssLogin = [[CkoSecureString alloc] init];
CkoSecureString *ssPassword = [[CkoSecureString alloc] init];

//  Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
//  a randomly generated session key.)
[crypt DecryptSecureENC: [json StringOf: @"ssh_login"] secureStr: ssLogin];
[crypt DecryptSecureENC: [json StringOf: @"ssh_password"] secureStr: ssPassword];

CkoSFtp *sftp = [[CkoSFtp alloc] init];

success = [sftp Connect: @"MY-SSH-SERVER-DOMAIN-OR-IP" port: [NSNumber numberWithInt: 22]];
if (success != YES) {
    NSLog(@"%@",sftp.LastErrorText);
    return;
}

//  Authenticate using secure strings
success = [sftp AuthenticateSecPw: ssLogin password: ssPassword];
if (success != YES) {
    NSLog(@"%@",sftp.LastErrorText);
    return;
}

NSLog(@"%@",@"SFTP Authentication successful.");

[sftp Disconnect];