Rust

SFTP Authenticate Secure

Demonstrates how to do SFTP password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Imagine we've previously saved our encrypted login and password within a JSON config file
// that contains this:

// {
//   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
//   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
// }

let json = chilkat::JsonObject::new();
let _ = json.load_file("qa_data/passwords/ssh.json");

let crypt = chilkat::Crypt2::new();

// These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
crypt.set_crypt_algorithm("aes");
crypt.set_cipher_mode("cbc");
crypt.set_key_length(128);
crypt.set_encoded_key("000102030405060708090A0B0C0D0E0F", "hex");
crypt.set_encoded_iv("000102030405060708090A0B0C0D0E0F", "hex");
crypt.set_encoding_mode("base64");

let ss_login = chilkat::SecureString::new();
let ss_password = chilkat::SecureString::new();

// Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
// a randomly generated session key.)
let _ = crypt.decrypt_secure_enc(&json.string_of("ssh_login").unwrap_or_default(), &ss_login);
let _ = crypt.decrypt_secure_enc(&json.string_of("ssh_password").unwrap_or_default(), &ss_password);

let sftp = chilkat::SFtp::new();

if sftp.connect("MY-SSH-SERVER-DOMAIN-OR-IP", 22).is_err() {
    println!("{}", sftp.last_error_text());
    return;
}

// Authenticate using secure strings
if sftp.authenticate_sec_pw(&ss_login, &ss_password).is_err() {
    println!("{}", sftp.last_error_text());
    return;
}

println!("SFTP Authentication successful.");

sftp.disconnect();