Key management

Discussion of open issues, suggestions and bugs regarding network security and data protection solution - SecureBridge
Post Reply
paxit
Posts: 3
Joined: Mon 01 Feb 2010 13:37

Key management

Post by paxit » Mon 01 Feb 2010 14:00

Hi!

I am working on a project, where I am going to upload files to a server via SFTP. I have problems opening the SSH connection. I have been provided a private key from the host.

My problem is, that when I try to import this key I get the error "Key is broken" The key header looks like this:
-----BEGIN DSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,AA38531A686FEE7F

I would be very happy to get some hints how to get the communication established.

Regards
Peder

Dimon
Devart Team
Posts: 2910
Joined: Mon 05 Mar 2007 16:32

Post by Dimon » Mon 01 Feb 2010 15:57

The point is that this key is saved in encrypted form with password. To import this key you should specify correct password when calling the TScKey.ImportFrom method.

paxit
Posts: 3
Joined: Mon 01 Feb 2010 13:37

Key management

Post by paxit » Wed 03 Feb 2010 11:58

Thanks, now I have the communication established. But I am still not sure about the rules how to establish a key pair for the tunnel. I am designing a SFTP client. This is the way I se it:

The client connects to the Host, first time without the host key. The server provides the key which the client saves locally. The client generates a private key, which is also stored locally. Then the communication is established.

I am not sure, if this is the order of events, and not quite sure how to generate the private key so it matches the Host key?

Is it OK to use the same key pair for establihing a new tunnel next time?

I have spent long time to estblish communication in the first place. There are so many parameters to set, and as I se it many ways to establish the tunnel. This is probably why it is so confusing. It would be nice with documentation for dummies describing scenario 1, scenario2 etc.

Appreciating your help

Peder

paxit
Posts: 3
Joined: Mon 01 Feb 2010 13:37

Key management

Post by paxit » Wed 03 Feb 2010 15:13

OK, I get it. In the help file you can read a very good description under "SSH client setup"

Dimon
Devart Team
Posts: 2910
Joined: Mon 05 Mar 2007 16:32

Post by Dimon » Thu 04 Feb 2010 08:22

I am happy that this problem has been solved. If any other questions come up, please contact me.

Post Reply