[JSch-users] bug in non-protected identity file

[Graeme V. <Gra...@nt...>]

I sent this message to 'js...@jc...' but didn't get any ack, so
hope this is sensible place to comment:

I'm in the middle of using this code to develop a client
to automate file transfers through a file wall. In need to
be able to do an ls(1) (e.g. inside sftp) in a system neutral 
fashion (works with servers running DOS, Unix, Linux, MVS etc) 
and also no GUI.

I've come across a bug in the public key mechanism. It looks as
if the code was only tested with identity files (private keys)
that are encrypted with a passphrase. For automated systems a
key without a passphrase is used. The format of identity files
with and without pass phrases is different.


hint: try generating rsa kes with and without a passphrase.

--

Graeme

P.S.

I've done a bunch of stuff to allow:

	sftp using public key (example uses password)
	All options via properties file, no need for a GUI (needed for
automation)
	Option of printing ATTR stuff rather the longname from sftp ls

When I've cleaned my stuff up I'll post diffs back to ..... where??




The contents of this email and any attachments are sent for the personal attention
of the addressee(s) only and may be confidential.  If you are not the intended
addressee, any use, disclosure or copying of this email and any attachments is
unauthorised - please notify the sender by return and delete the message.  Any
representations or commitments expressed in this email are subject to contract.
  
ntl Group Limited