CkPython

SSH Authenticate Secure

Demonstrates how to do SSH password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Imagine we've previously saved our encrypted login and password within a JSON config file
# that contains this:

# {
#   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
#   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
# }

json = chilkat.CkJsonObject()
json.LoadFile("qa_data/passwords/ssh.json")

crypt = chilkat.CkCrypt2()

# These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.put_CryptAlgorithm("aes")
crypt.put_CipherMode("cbc")
crypt.put_KeyLength(128)
crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F","hex")
crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex")
crypt.put_EncodingMode("base64")

ssLogin = chilkat.CkSecureString()
ssPassword = chilkat.CkSecureString()

# Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
# a randomly generated session key.)
crypt.DecryptSecureENC(json.stringOf("ssh_login"),ssLogin)
crypt.DecryptSecureENC(json.stringOf("ssh_password"),ssPassword)

ssh = chilkat.CkSsh()

success = ssh.Connect("MY-SSH-SERVER-DOMAIN-OR-IP",22)
if (success != True):
    print(ssh.lastErrorText())
    sys.exit()

# Authenticate using secure strings
success = ssh.AuthenticateSecPw(ssLogin,ssPassword)
if (success != True):
    print(ssh.lastErrorText())
    sys.exit()

print("SSH Authentication successful.")

ssh.Disconnect()