New SFTP plugin available now

[kfft]

The 1.8.2 is indeed more bug fixing, it could be worth checking that this time it does not break everything.
ED25519 was supposed to come soon this year but it seems the release is taking longer than expected.

[ghisler(Author)]

there is an issue with the latest Windows 10 v. 1903 (May 2019 update) and the SFTP plugin v. 2.20.

Unfortunately I haven't got 1903 yet, and "Check for updates" reports no updates available. I will check it once I get the new version here.

Try using the plugin version using OpenSSL dlls.

[hyperspaced]

there is an issue with the latest Windows 10 v. 1903 (May 2019 update) and the SFTP plugin v. 2.20.

Unfortunately I haven't got 1903 yet, and "Check for updates" reports no updates available. I will check it once I get the new version here.

Try using the plugin version using OpenSSL dlls.

You can download 1903 from this official link.
https://www.microsoft.com/en-us/software-download/windows10/

[ghisler(Author)]

Thanks, I have installed it now via Media Creation tool, and I can confirm the bug.

Unfortunately it doesn't look good: The problem is a bug in the Windows function BCryptImportKeyPair:
It fails to import an RSA key where the public key exponent is as large as the modulus.
It works with a small 3 byte modulus 65537.

This function is used for the initial key exchange between client and server.
Unfortunately there is almost no chance to get this fixed, there is no way to contact anyone at Microsoft about it.
I will therefore try to find a solution via other functions, e.g. Microsoft Crypto API (although it is marked as deprecated by Microsoft).

So for now, please use the OpenSSL version of the plugin. Sorry for the inconvenience.

[ghisler(Author)]

I found a solution: I'm now using the "libtommath" for the function which no longer works.

The updated plugin 2.30 is now available here:
https://www.ghisler.com/plugins.htm#filesys

Btw, the reason I'm still using libssh2 version 1.8.1 instead of 1.8.2 is that I added quite a few functions to support encrypted client certificates.

[Horst.Epp]

I found a solution: I'm now using the "libtommath" for the function which no longer works.

The updated plugin 2.30 is now available here:
https://www.ghisler.com/plugins.htm#filesys

Btw, the reason I'm still using libssh2 version 1.8.1 instead of 1.8.2 is that I added quite a few functions to support encrypted client certificates.

Name/Ver. on this page still shows 2.20 but contains 2.30

[ghisler(Author)]

Fixed the page, thanks.

Has anyone tried the new plugin yet?

[CoolWater]

Works for me! But I don't have installed the May 2019 Update yet.

HTH
CoolWater

[OldNorton]

It works for me--with the May 2019 update installed--to access SSHelper on Android.

[sqa_wizard]

In general V2.30 works for me too.
Servers using RedHat Linux are working fine.

I just get an error at an AIX server:
Right after entering the user name an error message appears which says:

Code: Select all

SFTP Error
Fehler: Authentifizierung via Methode 'keyboard-interaktiv' fehlgeschlagen!

Pressing [OK] will ask for the password and connects successfully.

I tried the same with V2.20 and there is no error at all.

Log says:
----- 8< -----
Loading SSH Library
========================
Verbinden mit: 192.168.0.1
IP address: 192.168.0.1:22
Server-Fingerabdruck:
...
Unterstützte Authentifizierungsmethoden: publickey,password,keyboard-interactive
Authentifizierung via Methode 'Tastatur-interaktiv' für Benutzer: xxx
libssh2_userauth_keyboard_interactive: PUBLICKEY_UNRECOGNIZED (18)
Fehler: Authentifizierung via Methode 'keyboard-interaktiv' fehlgeschlagen!
Authentifizierung via Kennwort für Benutzer: xxx
Sitzung startet... (SFTP)
CONNECT \MYSERVER
Verzeichnis einlesen: \
----- 8< -----

[ghisler(Author)]

Please try the new 2.40. It will ignore login erros with "keyboard interactive" and try "password authentication" instead. It will only show an error when both fail.

I prefer "keyboard interactive" over "password authentication" now when the server reports to support both, because only "keyboard interactive" allows two factor authentication like with Google authenticator (TOTP).

[CoolWater]

Fixed the page, thanks.

Has anyone tried the new plugin yet?

Still shows v2.20 here...

[ghisler(Author)]

Where does it show v2.20? On the page:
https://www.ghisler.com/plugins.htm#filesys

I see this now:
SFTP
2.40
2019/06/06

[CoolWater]

I mean the first page in this thread. Sorry for the confusion

[ghisler(Author)]

Ah, I didn't check there, thanks.