Enable ssh-dss algorighthm through system variable
- Dominant language
- Java
- Stars
- 1.1k
- Forks
- 400
- Avg merge
- 5d 1h
- Merged PRs (30d)
- 1
Description
We need to connect many SFTP servers and some SFTP servers are still using ` ssh-dss` algorithm for SFTP connection.
We have to use MuleSoft SFTP connector which internally uses `sshd-core-2.12.1` library, by default ` ssh-dss` algorithm are disabled because it is too weak to considered.
I'm able to communicate with these ssh-dss enabled SFTP servers using the settings below. However, I'm unable to apply the same settings in the MuleSoft SFTP connector because we can't modify their library.
```
sshClient.setKeyExchangeFactories(NamedFactory.setUpTransformedFactories(false,
BuiltinDHFactories.VALUES, ClientBuilder.DH2KEX));
sshClient.setSignatureFactories(new ArrayList<>(BuiltinSignatures.VALUES));
```
Could someone please advise if there's a method to enable the ssh-dss algorithm via system variable settings? This would allow us to connect to ssh-dss enabled SFTP servers without any code modifications.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the sshd-core 2.12.1 algorithm configuration and the shown SSH client factory settings, then check how system properties are currently handled. Done should mean a supported system-variable mechanism can enable the requested ssh-dss-related algorithms without modifying connector library code.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100