Uploaded image for project: 'Mule'
  1. Mule
  2. MULE-6288

SFTP Transport does not restrict access to known hosts only [Jsch StrictHostKeyChecking=yes] option.

    Details

    • Type: Patch submission
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix or Usage Issue
    • Affects Version/s: 3.2.1
    • Fix Version/s: None
    • Component/s: Transport: FTP / SFTP
    • Labels:
      None
    • Environment:

      Mule 3.2.1

    • User impact:
      Low
    • Effort points:
      0.5
    • Migration Impact:
      Hide
      None. the configuration only adds new attributes. No current attributes are affected.
      Code wise, JSch already supports this feature.
      Show
      None. the configuration only adds new attributes. No current attributes are affected. Code wise, JSch already supports this feature.
    • Similar Issues:

      Description

      JSch supports concept of StrictHostKeyChecking which is one of ask,yes,no.
      For mule, considering it is a non-interactive mode, atleast yes,no can be supported.
      sftp connector configuration should support something like this:
      <sftp:connector name="sftp-default" strictHostKeyChecking='yes' knownHostsFile='<path-of-known-hosts-file>'/>

      note: other attributes deleted for clarity.

      If strictHostKeyChecking='yes' and knownHostsFile is not set, drop hostChecking with a warning log.

      If strictHostKeyChecking='yes' and knownHostsFile is set,
      file is not accessible, throw IOException.

      If strictHostKeyChecking='yes' and knownHostsFile is set,
      file accessible, set the knownHostsFile to JSch's setHostNames(string fname) and use this during
      SFtpClient.login(...) methods.

      ==
      This can be a security concern.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              kvennelakanti Kalyan vennelakanti
            • Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                Remaining Estimate - 1 day
                1d
                Logged:
                Time Spent - Not Specified
                Not Specified