Lazarus Pascal

SFTP Authenticate Secure

Demonstrates how to do SFTP password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Lazarus Pascal

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.SFtp,
  Chilkat.SecureString,
  Chilkat.JsonObject,
  Chilkat.Crypt2;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  json: TJsonObject;
  crypt: TCrypt2;
  ssLogin: TSecureString;
  ssPassword: TSecureString;
  sftp: TSFtp;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  //  Imagine we've previously saved our encrypted login and password within a JSON config file
  //  that contains this:

  //  {
  //    "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
  //    "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
  //  }

  json := TJsonObject.Create;
  json.LoadFile('qa_data/passwords/ssh.json');

  crypt := TCrypt2.Create;

  //  These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
  crypt.CryptAlgorithm := 'aes';
  crypt.CipherMode := 'cbc';
  crypt.KeyLength := 128;
  crypt.SetEncodedKey('000102030405060708090A0B0C0D0E0F','hex');
  crypt.SetEncodedIV('000102030405060708090A0B0C0D0E0F','hex');
  crypt.EncodingMode := 'base64';

  ssLogin := TSecureString.Create;
  ssPassword := TSecureString.Create;

  //  Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
  //  a randomly generated session key.)
  crypt.DecryptSecureENC(json.StringOf('ssh_login'),ssLogin);
  crypt.DecryptSecureENC(json.StringOf('ssh_password'),ssPassword);

  sftp := TSFtp.Create;

  success := sftp.Connect('MY-SSH-SERVER-DOMAIN-OR-IP',22);
  if (success <> True) then
    begin
      WriteLn(sftp.LastErrorText);
      Exit;
    end;

  //  Authenticate using secure strings
  success := sftp.AuthenticateSecPw(ssLogin,ssPassword);
  if (success <> True) then
    begin
      WriteLn(sftp.LastErrorText);
      Exit;
    end;

  WriteLn('SFTP Authentication successful.');

  sftp.Disconnect();


  json.Free;
  crypt.Free;
  ssLogin.Free;
  ssPassword.Free;
  sftp.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.