ssh - How to resolve Java UnknownHostKey, while using JSch SFTP library? -


i'm running java program transfer file 1 folder another, using java sftp. problem i'm having i'm getting following error in java sftp (using jsch) :

c:\oracle\middleware\oracle_home\oracle_common\jdk\bin\javaw.exe -server -classpath c:\jdeveloper\mywork\java_hello_world.adf;c:\jdeveloper\mywork\java_hello_world\client\classes;c:\users\admin\downloads\jsch-0.1.53.jar -djavax.net.ssl.truststore=c:\users\ibm_ad~1\appdata\local\temp\truststore5840796204189742395.jks filetransfer com.jcraft.jsch.jschexception: unknownhostkey: 127.0.0.1. rsa key fingerprint a2:39:3f:44:88:e9:1f:d7:d1:71:f4:85:98:fb:90:dc @ com.jcraft.jsch.session.checkhost(session.java:797) @ com.jcraft.jsch.session.connect(session.java:342) @ com.jcraft.jsch.session.connect(session.java:183) @ filetransfer.main(filetransfer.java:33) process exited exit code 0.

the following code far:

filetransfer filetransfer = new filetransfer();                jsch jsch = new jsch();  try {      string host = "127.0.0.1";     int port = 22;      string user = "user";     session session = jsch.getsession(user, host, port);           session = jsch.getsession("username", "127.0.0.1", 22);     session.connect();  // bug here , java.net.connectexception      channelsftp sftp = null;     sftp = (channelsftp)session.openchannel("sftp") ; //channel;      //extra config code     java.util.properties config = new java.util.properties();      config.put("stricthostkeychecking", "no");     session.setconfig(config);     // end config code      sftp.rename("c:\\users\\admin\\desktop\\work\\connectone_bancorp\\java_work\\sftp_1\\house.bmp", "c:\\users\\admin\\desktop\\work\\connectone_bancorp\\java_work\\sftp_2\\house.bmp");       session.disconnect();  } catch (jschexception e) {     e.printstacktrace();   } catch (sftpexception e) {     e.printstacktrace(); } //end-catch

my cygwin set up, , checked (with netstat -a -b ) it's running.

you trying skip host key checking setting stricthostkeychecking no.

but have before checking, i.e. before session.connect().

anyway, should never this, unless not care security. host key checking there protect man-in-the-middle attacks.

instead, set expected host key let jsch verify it.

for example:

  • call jsch.setknownhosts providing path .ssh/known_hosts-like file.

    to generate .ssh/known_hosts-like file, can use ssh-keyscan command openssh. if connecting *nix server, should have command available, run

    ssh-keyscan example.com > known_hosts

    it have format like:

    example.com ssh-rsa aaaab3nzac1yc2eaaaabiwaaaqea0hvqzovz7ywgie9ohdtorjvi5fjjoh1yegamad5g3werh0z7e9ybtq1mguerkjtea7bzru0isr0ez9hionogyrdmi7s+biwpdbukjva4masvzzvsy6ogy/apkxm6kbcml8u4wjxaow3nkzkqebvr3pc+nqva+sjuzq8d2xbrd4edufxelzwqwen9g7gslgb1hjksurtgrfohbluucknr8rv82i3jvlsnawb3mwn0m3wgdlja8j+5yag4e6jgskrscobzk7w1r6iuyuh1za+dtahydyyvhb4fnyzpl0hgz2psb9c+ideifct/lt4/dq+krw6dyn66ls8pes8zcj9csq==

    and reference generated known_hosts file in jsch code.

    if on windows, run command on server (from ssh terminal). , download generated known_hosts windows machine.

  • call jsch.gethostkeyrepository().add() provide expected host key (e.g. hard-coded, other credentials).

    see creating jsch hostkey instance public key in .pub format.


Comments

Post a Comment

Popular posts from this blog

PHP and MySQL WP -

i trying accomplish 2 things here code. writing php directly wp page using insert php plugin. 1) query mysql database , return results 1 column 4 columns. 2) make each result own hyperlink directs user new wp page runs new query on page. i able query show results , turn results dynamic hyperlink, cannot formatting down. right returns result 1 column. here have: [insert_php] $servername = "localhost"; $username = "login"; //edited privacy $password = "password"; //edited privacy $database = "database"; //edited privacy // create connection $conn = new mysqli($servername, $username, $password, $database); // check connection if ($conn->connect_error) { die("connection failed: " . $conn->connect_error); } echo "connected successfully"; //get results database $result = mysqli_query($conn,"select mine mines order mine"); $all_property = array(); //declare array saving property //showing proper...
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

go - golang pprof for c library code -

i have been trying profile golang application pprof, seems details of c code(linked static library) missed in output result. flame graph from frame graph can see c code time consuming reported within "runtime._externalcode", no details @ all. , sure static library compiled debug enable. so there way make pprof details(like stack trace) of 3rd party c code? or there other golang profiling tool this?
Read more