New SFTP plugin available now

[Sob]

New Pageant uses some kind of protection. I don't really understand it, but it can be compiled without it and then it works:

# - XFLAGS=/DUNPROTECT
# Disable tightened ACL on PuTTY process so that e.g. debuggers
# can attach to it.

In any case, it looks like something that libssh2 authors will have to deal with.

[squeeze69]

Ok, so I've got to contact libssh2 authors.
I'd like to continue using sftp plugin instead of filezilla when putty > 0.67 will be released.

Thanks, Marco.

[Mikefield]

Ok, so I've got to contact libssh2 authors.

Did you have any news from the authors?

mf

[ghisler(Author)]

It doesn't seem to be a problem with libssh2, but with Pageant not allowing to connect third party programs.

[Mikefield]

My question was more regarding updated libssh2 dll's. The last 7.40 are a little bit old.

mf

[addhaloka]

The last 7.40 are a little bit old.

Try this: https://www.upload.ee/files/6695157/tc_x32-x64_openssl_dlls_v1.0.2k-n-libssh2_v1.8.1-20170219.rar.html

Latest OpenSSL and libssh2, made for themselves, seems works (not deeply tested).
Compiled in WINDDK 3790.1830 (XP build environment), zlib static linked. libssl32.dll - renamed ssleay32.dll.

[ghisler(Author)]

A new beta version of my SFTP plugin is available now! I have added the timestamp copy function as described above.

Furthermore, I have compiled libssh2.dll myself - this version does NOT use OpenSSL! Since all the actual encryption is done in Windows, I can include the DLL, so no separate DLL download is needed any more!

Instead it uses new Windows crypto functions available in Windows VISTA or newer. If you use Windows XP or older, you will still have to get the LibSSH2 and OpenSSL dlls separately.

Download here (32+64-bit combined):
https://plugins.ghisler.com/beta/sftpplug143beta2.zip

I have made several enhancements not available in libssh2:
1. Loading of the new SSH private keys beginning with
-----BEGIN OPENSSH PRIVATE KEY-----
This new format offers much better key protection than the old format!
2. No need for public key when using new key format (from 3). Just put the path to the private key in both fields.
3. Support for ECDSA (elliptic curve) private key authentication
4. Support for ECDSA server keys

Please try it and let me know what you think!

[gerhard.weinberger]

A new beta version of my SFTP plugin is available now! I have added the timestamp copy function as described above.

Furthermore, I have compiled libssh2.dll myself - this version does NOT use OpenSSL! Since all the actual encryption is done in Windows, I can include the DLL, so no separate DLL download is needed any more!

Works perfect as always. No need for downloading dll files.

[ghisler(Author)]

Nice to hear that, thanks for testing it!

Other users of SFTP, please try the new plugin too!

[Mikefield]

Other users of SFTP, please try the new plugin too!

Hello Christian, many thanks for the new version. Made some tests and it works fine. But found a bug:
No error message occurs when a folder should be deleted and the user have no rights to delete it. The folder is not deleted.

How do you think to add folders in the plugin where connections can be put together like the ftp connections? Is that possible?


mf

[ghisler(Author)]

Thanks, I will check that. Was this due to Unix permissions?

Regarding folders - in theory it would be possible, but would need a lot of work.

[Mikefield]

Thanks, I will check that. Was this due to Unix permissions?

Yes, RHEL 5.

Regarding folders - in theory it would be possible, but would need a lot of work.

Folders are really needed. Thanks for check that out.

mf

[glipman]

More good news: I could not use SFTP for my pfSense firewall for the past 6 months because the latest pfSense version required SSL-suites the OpenSSH DLLs did not support yet.

With the beta of the new plugin everything is working like a charm again.

[sqa_wizard]

I tried 1.4.3 beta2 too.
No problems so far.

... and yes, folder support would make it perfect.

[ghisler(Author)]

2glipman
Nice to hear that! It's probably because I have added ECDSA support (elliptic curve key exchange). Do you use a password or a client certificate to log in?

2sqa_wizard
Would a single level of subfolders be sufficient? That wouldn't be so difficult to add...