Zig

SFTP Authenticate Secure

Demonstrates how to do SFTP password authentication with secure strings.

This example requires Chilkat v9.5.0.71 or greater.

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Imagine we've previously saved our encrypted login and password within a JSON config file
    // that contains this:

    // {
    //   "ssh_login": "2+qylFfC56Ck7OQQt/U2/w==",
    //   "ssh_password": "5neIq9Jmn0E3p71N6Yc8TA=="
    // }

    const json = try chilkat.JsonObject.init();
    defer json.deinit();
    json.loadFile("qa_data/passwords/ssh.json") catch {};

    const crypt = try chilkat.Crypt2.init();
    defer crypt.deinit();

    // These are the encryption settings we previously used to encrypt the credentials within the JSON config file.
    crypt.setCryptAlgorithm("aes");
    crypt.setCipherMode("cbc");
    crypt.setKeyLength(128);
    crypt.setEncodedKey("000102030405060708090A0B0C0D0E0F", "hex");
    crypt.setEncodedIV("000102030405060708090A0B0C0D0E0F", "hex");
    crypt.setEncodingMode("base64");

    const ss_login = try chilkat.SecureString.init();
    defer ss_login.deinit();
    const ss_password = try chilkat.SecureString.init();
    defer ss_password.deinit();

    // Decrypt to the secure string.  (the strings will still held in memory encrypted, but are now encrypted using
    // a randomly generated session key.)
    crypt.decryptSecureENC(try json.stringOf(alloc, "ssh_login"), ss_login) catch {};
    crypt.decryptSecureENC(try json.stringOf(alloc, "ssh_password"), ss_password) catch {};

    const sftp = try chilkat.SFtp.init();
    defer sftp.deinit();

    sftp.connect("MY-SSH-SERVER-DOMAIN-OR-IP", 22) catch {
        std.debug.print("{s}\n", .{try sftp.getLastErrorText(alloc)});
        return;
    };

    // Authenticate using secure strings
    sftp.authenticateSecPw(ss_login, ss_password) catch {
        std.debug.print("{s}\n", .{try sftp.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("SFTP Authentication successful.\n", .{});

    sftp.disconnect();
}