ed25519 SSH identity key support
DSA has been disabled by default in OpenSSH 7.0 due to security issues. ed25519 and edcsa are the new recommended standards. They have been supported since OpenSSH 5.6 However, Solid Explorer treats the keys as invalid.
Ray Foss
shared this idea
-
m-p{3}
commented
FYI It's been added in version 2.7.8.
Still not sure how I can add such a key made with ConnectBot, seems like it doesn't want to accept the private key format (PKCS#8 if I'm not mistaken) it gives out.
example:
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VwBCIEINTuctv5E1hK1bbY8fdp+K06/nwoy/HU++CXqI9EdVhC
-----END PRIVATE KEY-----
https://tools.ietf.org/html/rfc8410#section-10.3IMO Solid Explorer should be able to accept different key formats, or at least tell which format it accepts.
-
Eric Haynes
commented
Not sure if voting on such an old issue gets it out of the dusty old ideas bucket, but this should definitely be on the roadmap. ED25519 is widely considered a more future-proof solution, achieving comparable security with much shorter keys. DSA and ECDSA should basically be considered deprecated at this point, and there should always be more than one viable option in the event of some inherent flaw being made public.
-
Jeon
commented
Second elliptic curve public key support
-
Nico
commented
Here's the stacktrace corresponding to my previous message:
W SolidExplorer: Erreur inconnue
W SolidExplorer: pl.solidexplorer.common.exceptions.SEException: Erreur inconnue
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.createNewClient(SFTPFileSystem.java:142)
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.createNewClient(SFTPFileSystem.java:125)
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.getClient(SFTPFileSystem.java:576)
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.getFileInstanceImpl(SFTPFileSystem.java:334)
W SolidExplorer: at pl.solidexplorer.filesystem.FileSystem.getFileInstance(FileSystem.java:398)
W SolidExplorer: at pl.solidexplorer.panel.explorer.Explorer.getFileInstance(Explorer.java:545)
W SolidExplorer: at pl.solidexplorer.panel.explorer.Explorer$Browser.run(Explorer.java:1117)
W SolidExplorer: Caused by: java.lang.NullPointerException: Attempt to invoke virtual method 'java.lang.String pl.solidexplorer.filesystem.OpenCallback.getPassword(java.lang.String)' on a null object reference
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.authenticate(SFTPFileSystem.java:188)
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.createAndAuthenticate(SFTPFileSystem.java:116)
W SolidExplorer: at pl.solidexplorer.plugins.network.ftp.sftp.SFTPFileSystem.createNewClient(SFTPFileSystem.java:130)
W SolidExplorer: ... 6 more -
Nico
commented
Solid Explorer also badly handles newer OpenSSH RSA keys with empty passphrases: at first everything seems to work, but a null pointer exception (while retrieving the passphrase) is thrown when browsing a bit and initiating a connection refresh (like when downloading a file)
-
Nico
commented
Any update about this?
SSH keys based on Elliptic curves have been a standard for years now.