Comments (5)
Hi @austinarbor-wk,
Yes, I suspect this server doesn't correctly support RSA/SHA-2 and it is failing when JSch attempts RSA/SHA-2 based authentication. So you either will want to remove the RSA/SHA-2 algorithms (rsa-sha2-512
& rsa-sha2-256
) from the PubkeyAcceptedAlgorithms
config setting, or make sure RSA/SHA-1 (ssh-rsa
) has a higher priority by appearing earlier in the comma delimited list for the PubkeyAcceptedAlgorithms
config setting.
Thanks,
Jeremy
from jsch.
@norrisjeremy thanks for your quick response! We use a generalized "works-for-everyone" config and the same code is also used for servers which do support rsa-sha2-512
and rsa-sha2-256
and we don't know ahead of time what the server will support. Do you think moving ssh-rsa
ahead in the priority list will make those no longer work, or should it essentially be a no-op?
from jsch.
Hi @austinarbor-wk,
If the other types of servers you connect to support both RSA/SHA-2 and RSA/SHA-1, by prioritizing RSA/SHA-1 in the list, you will coercing JSch into performing insecure authentication with these servers (since RSA/SHA-1 is generally considered cryptographically insecure).
Ultimately this will be a judgement call that only you can make, since only you better the nature of your application, the type servers you are connecting to, etc., and not us.
Thanks,
Jeremy
from jsch.
@norrisjeremy thanks for the info, appreciate the quick responses!
from jsch.
confirming that moving ssh-rsa
in front of the other rsa algorithms resolved the exception
from jsch.
Related Issues (20)
- Packet corrupt HOT 2
- "JSchException: key type ssh-rp is not supported" Error on adding identity HOT 3
- Multi-Release jar for Java8 HOT 2
- Android: DexMerge Failed HOT 10
- Remind issue #484 HOT 1
- Advice to securely connect to a 'special' remote host HOT 1
- how to write part of sftp file with ChannelSftp HOT 1
- A strange bug when use InPutStream and OutPutStream
- FATAL: Bad packet length 604 HOT 1
- ChannelSftp.put() throws SftpException on some Android devices HOT 1
- sftp server die thread blocking during sftp ls execution HOT 4
- Prevent algorithm from known_host entry added to server host key list HOT 4
- How do I enable ssh-rsa (RSA/SHA1) in the latest version? HOT 1
- Next release plans HOT 6
- Scala compilation issue HOT 1
- "Could not connect to server" dependend on Jsch version and FTP key HOT 1
- ConnectTimeout from ssh-config read as ms instead of seconds? HOT 1
- Invalid PrivateKey
- Parsing malformed RSA key can try to allocate huge amount of memory HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from jsch.