Zig

Connect to an SFTP Server Through a Jump Host

Demonstrates the Chilkat SFtp.ConnectThroughSsh method, which connects to an SFTP server through an already connected and authenticated Ssh object. The first argument is the jump-host Ssh object, and the second and third are the destination hostname and port.

Background: This is the "jump host" (bastion) pattern: the application connects to a reachable gateway, then tunnels onward to an SFTP server that is only accessible from inside the network. Each hop authenticates separately with its own credentials. The result is a normal SFtp object — still requiring its own authentication and InitializeSftp — that happens to be routed through the first connection.

Chilkat Zig Downloads

Download Chilkat for Zig

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // Demonstrates the SFtp.ConnectThroughSsh method, which connects to an SFTP server through an
    // already connected and authenticated Ssh object (a jump host).  The 1st argument is the Ssh
    // object, and the 2nd and 3rd are the destination hostname and port.

    const ssh_jump = try chilkat.Ssh.init();
    defer ssh_jump.deinit();

    // Connect and authenticate to the jump host first.
    const port = 22;
    ssh_jump.connect("jump.example.com", port) catch {
        std.debug.print("{s}\n", .{try ssh_jump.getLastErrorText(alloc)});
        return;
    };

    // Normally you would not hard-code the password in source.  You should instead obtain it
    // from an interactive prompt, environment variable, or a secrets vault.
    const password = "mySshPassword";

    ssh_jump.authenticatePw("myJumpLogin", password) catch {
        std.debug.print("{s}\n", .{try ssh_jump.getLastErrorText(alloc)});
        return;
    };

    // Connect to the SFTP server through the jump host.
    const sftp = try chilkat.SFtp.init();
    defer sftp.deinit();
    sftp.connectThroughSsh(ssh_jump, "sftp.internal.example.com", port) catch {
        std.debug.print("{s}\n", .{try sftp.getLastErrorText(alloc)});
        return;
    };

    // Authenticate to the SFTP server (its own credentials), then initialize SFTP.
    sftp.authenticatePw("mySshLogin", password) catch {
        std.debug.print("{s}\n", .{try sftp.getLastErrorText(alloc)});
        return;
    };

    sftp.initializeSftp() catch {
        std.debug.print("{s}\n", .{try sftp.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("Connected to the SFTP server through the jump host.\n", .{});

    sftp.disconnect();
    ssh_jump.disconnect();
}