com.sshtools.ssh

Interface HostKeyVerification

All Known Implementing Classes:

AbstractKnownHostsKeyVerification, ConsoleKnownHostsKeyVerification

public interface HostKeyVerification

This interface provides a callback method so that the user can verify the identity of the server (by checking the public key) during the initial protocol negotiation. This check is performed at the beginning of each connection to prevent trojan horses (by routing or DNS spoofing) and man-in-the-middle attacks.

The user should verify that the key is acceptable; the most usual method being a local database file called known_hosts. The core J2SSH Maverick engine does not enforce any specific host key verification in order that the engine can be used on Java platforms that do not have File objects. A known_hosts implementation AbstractKnownHostsKeyVerification can be found in the SSHTools utility classes supplied with the J2SSH Maverick API. This also includes the basic ConsoleKnownHostsKeyVerification which performs the check by prompting the user through stdin/stdout.

The public key instances supplied to the verifyHost method will be one of the following implementations:

To set a host key verification you must get an instance of the SshConnector and configure the SSH version context's with your implementation.

 SshConnector con = SshConnector.getInstance();
 
 HostKeyVerification hkv = new HostKeyVerification() {
        public boolean verifyHost(String name, SshPublicKey key) throws IOException {
                // Verify the host somehow???
                return true;
        }
 };
 SshContext context = con.getContext();
 context.setHostKeyVerification(hkv);
 

Author:

Lee David Painter

Method Summary

Methods

Modifier and Type	Method and Description
boolean	verifyHost(String host, SshPublicKey pk) Verify that the public key is acceptable for the host.

Method Detail

verifyHost

boolean verifyHost(String host,
                 SshPublicKey pk)
                   throws SshException

Verify that the public key is acceptable for the host.

Parameters:

host - the name of the connected host

pk - the public key supplied by the host

Returns:

true if the host key is acceptable otherwise false

Throws:

SshException