blocks|key|1153076|text|避免主机密钥检查是一种安全风险。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1153077|JSch使用HostKeyRepository接口和它的默认实现KnownHosts类来管理这一点。您可以通过实现HostKeyRepository来提供允许特定键的替代实现。或者，您可以将希望允许的密钥保存在known_hosts+format中的文件中，然后调用|offset|length|1153078|jsch.setKnownHosts(knownHostsFileName);|code-block|syntax|javascript|1153079|或者使用公钥字符串，如下所示。|1153080|String+knownHostPublicKey+=+"mysite.com+ecdsa-sha2-nistp256+AAAAE............/3vplY";
jsch.setKnownHosts(new+ByteArrayInputStream(knownHostPublicKey.getBytes()));|1153081|有关更多详细信息，请参阅Javadoc。|1153082|这将是一个更安全的解决方案。|1153083|Jsch是开源的，您可以从here下载源代码。在examples文件夹中，查找KnownHosts.java以了解更多详细信息。|1153084|entityMap|0|LINK|mutability|MUTABLE|url|http://pthree.org/2011/12/30/making-sense-of-hashed-hosts-in-sshknown_hosts/|1|https://epaul.github.io/jsch-documentation/simple.javadoc/com/jcraft/jsch/JSch.html#setKnownHosts(java.lang.String)|2|https://sourceforge.net/projects/jsch/files/jsch/0.1.54/jsch-0.1.54.zip/download^0|0|2X|I|0|0|0|0|0|C|7|1|0|0|D|4|2|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@$D|18|E|19|1|1A]]|A|$]]|$1|F|3|G|5|H|7|1B|8|@]|9|@]|A|$I|J]]|$1|K|3|L|5|6|7|1C|8|@]|9|@]|A|$]]|$1|M|3|N|5|H|7|1D|8|@]|9|@]|A|$I|J]]|$1|O|3|P|5|6|7|1E|8|@]|9|@$D|1F|E|1G|1|1H]]|A|$]]|$1|Q|3|R|5|6|7|1I|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1J|8|@]|9|@$D|1K|E|1L|1|1M]]|A|$]]|$1|U|3|-4|5|6|7|1N|8|@]|9|@]|A|$]]]|V|$W|$5|X|Y|Z|A|$10|11]]|12|$5|X|Y|Z|A|$10|13]]|14|$5|X|Y|Z|A|$10|15]]]]

It is a security risk to avoid host key checking. 

JSch uses HostKeyRepository interface and its default implementation KnownHosts class to manage this. You can provide an alternate implementation that allows specific keys by implementing HostKeyRepository. Or you could keep the keys that you want to allow in a file in the <a href="http://pthree.org/2011/12/30/making-sense-of-hashed-hosts-in-sshknown_hosts/" rel="noreferrer">known_hosts format</a> and call

<pre><code>jsch.setKnownHosts(knownHostsFileName);
</code></pre>

Or with a public key String as below.

<pre><code>String knownHostPublicKey = "mysite.com ecdsa-sha2-nistp256 AAAAE............/3vplY";
jsch.setKnownHosts(new ByteArrayInputStream(knownHostPublicKey.getBytes()));
</code></pre>

see <a href="https://epaul.github.io/jsch-documentation/simple.javadoc/com/jcraft/jsch/JSch.html#setKnownHosts(java.lang.String)" rel="noreferrer">Javadoc</a> for more details.

This would be a more secure solution. 

Jsch is open source and you can download the source from <a href="https://sourceforge.net/projects/jsch/files/jsch/0.1.54/jsch-0.1.54.zip/download" rel="noreferrer">here</a>. In the examples folder, look for KnownHosts.java to know more details.

blocks|key|1153131|text|根据用于ssh的程序的不同，获取适当密钥的方法可能会有所不同。Putty+(在Windows中很流行)使用自己的ssh密钥格式。在我所见过的大多数Linux和BSD的变种中，你只需要看看~/.ssh/known_hosts。我通常从Linux机器上ssh，然后将这个文件复制到Windows机器上。然后，我使用类似于|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1153132|jsch.setKnownHosts("C:\\Users\\cabbott\\known_hosts");|code-block|syntax|javascript|1153133|假设我已经将该文件放在我的Windows机上的C:\Users\cabbott中。如果您不能访问Linux机器，可以尝试http://www.cygwin.com/|1153134|也许其他人可以推荐另一种Windows替代方案。我发现putty通过以非标准格式将SSH键存储在注册表中来处理SSH键的方式，提取起来很麻烦。|1153135|entityMap|0|LINK|mutability|MUTABLE|url|http://www.cygwin.com/^0|2L|I|0|0|N|G|1O|M|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|Z|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@$9|13|A|14|1|15]]|E|$]]|$1|M|3|N|5|6|7|16|8|@]|D|@]|E|$]]|$1|O|3|-4|5|6|7|17|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]]]

Depending on what program you use for ssh, the way to get the proper key could vary. Putty (popular with Windows) uses their own format for ssh keys. With most variants of Linux and BSD that I've seen, you just have to look in <code>~/.ssh/known_hosts</code>. I usually ssh from a Linux machine and then copy this file to a Windows machine. Then I use something similar to 

<pre><code>jsch.setKnownHosts("C:\\Users\\cabbott\\known_hosts");
</code></pre>

Assuming I have placed the file in <code>C:\Users\cabbott</code> on my Windows machine. If you don't have access to a Linux machine, try <a href="http://www.cygwin.com/">http://www.cygwin.com/</a>

Maybe someone else can suggest another Windows alternative. I find putty's way of handling SSH keys by storing them in the registry in a non-standard format bothersome to extract.

blocks|key|1153167|text|您还可以执行以下代码。它已经过测试并正常工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1153168|import+com.jcraft.jsch.Channel;
import+com.jcraft.jsch.JSch;
import+com.jcraft.jsch.JSchException;
import+com.jcraft.jsch.Session;
import+com.jcraft.jsch.UIKeyboardInteractive;
import+com.jcraft.jsch.UserInfo;

public+class+SFTPTest+{

++++public+static+void+main(String[]+args)+{
++++++++JSch+jsch+=+new+JSch();
++++++++Session+session+=+null;
++++++++try+{
++++++++++++session+=+jsch.getSession("username",+"mywebsite.com",+22);+//default+port+is+22
++++++++++++UserInfo+ui+=+new+MyUserInfo();
++++++++++++session.setUserInfo(ui);
++++++++++++session.setPassword("123456".getBytes());
++++++++++++session.connect();
++++++++++++Channel+channel+=+session.openChannel("sftp");
++++++++++++channel.connect();
++++++++++++System.out.println("Connected");
++++++++}+catch+(JSchException+e)+{
++++++++++++e.printStackTrace(System.out);
++++++++}+catch+(Exception+e){
++++++++++++e.printStackTrace(System.out);
++++++++}+finally{
++++++++++++session.disconnect();
++++++++++++System.out.println("Disconnected");
++++++++}
++++}

++++public+static+class+MyUserInfo+implements+UserInfo,+UIKeyboardInteractive+{

++++++++@Override
++++++++public+String+getPassphrase()+{
++++++++++++return+null;
++++++++}
++++++++@Override
++++++++public+String+getPassword()+{
++++++++++++return+null;
++++++++}
++++++++@Override
++++++++public+boolean+promptPassphrase(String+arg0)+{
++++++++++++return+false;
++++++++}
++++++++@Override
++++++++public+boolean+promptPassword(String+arg0)+{
++++++++++++return+false;
++++++++}
++++++++@Override
++++++++public+boolean+promptYesNo(String+arg0)+{
++++++++++++return+false;
++++++++}
++++++++@Override
++++++++public+void+showMessage(String+arg0)+{
++++++++}
++++++++@Override
++++++++public+String[]+promptKeyboardInteractive(String+arg0,+String+arg1,
++++++++++++++++String+arg2,+String[]+arg3,+boolean[]+arg4)+{
++++++++++++return+null;
++++++++}
++++}
}|code-block|syntax|javascript|1153169|请替换适当的值。|1153170|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can also execute the following code. It is tested and working.

<pre><code>import com.jcraft.jsch.Channel;
import com.jcraft.jsch.JSch;
import com.jcraft.jsch.JSchException;
import com.jcraft.jsch.Session;
import com.jcraft.jsch.UIKeyboardInteractive;
import com.jcraft.jsch.UserInfo;

public class SFTPTest {

 public static void main(String[] args) {
 JSch jsch = new JSch();
 Session session = null;
 try {
 session = jsch.getSession("username", "mywebsite.com", 22); //default port is 22
 UserInfo ui = new MyUserInfo();
 session.setUserInfo(ui);
 session.setPassword("123456".getBytes());
 session.connect();
 Channel channel = session.openChannel("sftp");
 channel.connect();
 System.out.println("Connected");
 } catch (JSchException e) {
 e.printStackTrace(System.out);
 } catch (Exception e){
 e.printStackTrace(System.out);
 } finally{
 session.disconnect();
 System.out.println("Disconnected");
 }
 }

 public static class MyUserInfo implements UserInfo, UIKeyboardInteractive {

 @Override
 public String getPassphrase() {
 return null;
 }
 @Override
 public String getPassword() {
 return null;
 }
 @Override
 public boolean promptPassphrase(String arg0) {
 return false;
 }
 @Override
 public boolean promptPassword(String arg0) {
 return false;
 }
 @Override
 public boolean promptYesNo(String arg0) {
 return false;
 }
 @Override
 public void showMessage(String arg0) {
 }
 @Override
 public String[] promptKeyboardInteractive(String arg0, String arg1,
 String arg2, String[] arg3, boolean[] arg4) {
 return null;
 }
 }
}
</code></pre>

Please substitute the appropriate values.

blocks|key|1368316|text|设置已知主机比设置指纹图打印值更好。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1368317|当您设置已知主机时，尝试从应用程序运行的机器中手动ssh+(第一次，在应用程序运行之前)。|1368318|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

setting known host is better than setting fingure print value.

When you set known host, try to manually ssh (very first time, before application runs) from the box the application runs.

blocks|key|1368361|text|只需替换为"user“、"pass”、"SSHD_IP“即可。并使用服务器的~/.ssh/known_hosts的内容创建一个名为known_hosts.txt的文件。您将获得一个shell。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1368362|public+class+Known_Hosts+{
public+static+void+main(String[]+arg)+{
++++try+{
++++++++JSch+jsch+=+new+JSch();
++++++++jsch.setKnownHosts("known_hosts.txt");
++++++++Session+session+=+jsch.getSession("user",+"SSHD_IP",+22);
++++++++session.setPassword("pass");
++++++++session.connect();
++++++++Channel+channel+=+session.openChannel("shell");
++++++++channel.setInputStream(System.in);
++++++++channel.setOutputStream(System.out);
++++++++channel.connect();
++++}+catch+(Exception+e)+{
++++++++System.out.println(e);
++++}
++}
}|code-block|syntax|javascript|1368363|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Just substitute "user", "pass", "SSHD_IP". And create a file called known_hosts.txt with the content of the server's ~/.ssh/known_hosts. You will get a shell.

<pre><code>public class Known_Hosts {
public static void main(String[] arg) {
 try {
 JSch jsch = new JSch();
 jsch.setKnownHosts("known_hosts.txt");
 Session session = jsch.getSession("user", "SSHD_IP", 22);
 session.setPassword("pass");
 session.connect();
 Channel channel = session.openChannel("shell");
 channel.setInputStream(System.in);
 channel.setOutputStream(System.out);
 channel.connect();
 } catch (Exception e) {
 System.out.println(e);
 }
 }
}
</code></pre>

blocks|key|1368366|text|JSch+jsch+=+new+JSch();
Session+session+=+null;
try+{
session+=+jsch.getSession("user",+"hostname",+22);+//+default
UserInfo+ui+=+new+MyUserInfo();
session.setUserInfo(ui);
session.setPassword("password".getBytes());
java.util.Properties+config+=+new+java.util.Properties();
config.put("StrictHostKeyChecking",+"no");
session.setConfig(config);
session.connect();
Channel+channel+=+session.openChannel("sftp");
channel.connect();
System.out.println("Connected");
}+catch+(JSchException+e)+{
e.printStackTrace(System.out);
}+catch+(Exception+e)+{
e.printStackTrace(System.out);
}+finally+{
session.disconnect();
System.out.println("Disconnected");
}
}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1368367|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>JSch jsch = new JSch();
Session session = null;
try {
session = jsch.getSession("user", "hostname", 22); // default
UserInfo ui = new MyUserInfo();
session.setUserInfo(ui);
session.setPassword("password".getBytes());
java.util.Properties config = new java.util.Properties();
config.put("StrictHostKeyChecking", "no");
session.setConfig(config);
session.connect();
Channel channel = session.openChannel("sftp");
channel.connect();
System.out.println("Connected");
} catch (JSchException e) {
e.printStackTrace(System.out);
} catch (Exception e) {
e.printStackTrace(System.out);
} finally {
session.disconnect();
System.out.println("Disconnected");
}
}
</code></pre>

blocks|key|1368390|text|您也可以简单地这样做|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1368391|session.setConfig("StrictHostKeyChecking",+"no");|code-block|syntax|javascript|1368392|它不安全，而且它是一个不适合实时环境的解决方案，因为它将禁用全局已知的主机密钥检查。|1368393|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can also simply do

<pre><code>session.setConfig("StrictHostKeyChecking", "no");
</code></pre>

It's not secure and it's a workaround not suitable for live environment as it will disable globally known host keys checking.

blocks|key|1153312|text|提供主机的公共rsa密钥:-|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1153313|String+knownHostPublicKey+=+"mywebsite.com+ssh-rsa+AAAAB3NzaC1.....XL4Jpmp/";

session.setKnownHosts(new+ByteArrayInputStream(knownHostPublicKey.getBytes()));|code-block|syntax|javascript|1153314|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Supply the public rsa key of the host :-

<pre><code>String knownHostPublicKey = "mywebsite.com ssh-rsa AAAAB3NzaC1.....XL4Jpmp/";

session.setKnownHosts(new ByteArrayInputStream(knownHostPublicKey.getBytes()));
</code></pre>

I'm trying to use <a href="http://www.jcraft.com/jsch/" rel="noreferrer">Jsch</a> to establish an SSH connection in Java. My code produces the following exception:

<pre><code>com.jcraft.jsch.JSchException: UnknownHostKey: mywebsite.com. 
RSA key fingerprint is 22:fb:ee:fe:18:cd:aa:9a:9c:78:89:9f:b4:78:75:b4
</code></pre>

I cannot find how to verify the host key in the Jsch documentation. I have included my code below.

<pre><code>import com.jcraft.jsch.JSch;
import com.jcraft.jsch.Session;

public class ssh {
 public static void main(String[] arg) {

 try {
 JSch jsch = new JSch();

 //create SSH connection
 String host = "mywebsite.com";
 String user = "username";
 String password = "123456";

 Session session = jsch.getSession(user, host, 22);
 session.setPassword(password);
 session.connect();

 } catch(Exception e) {
 System.out.println(e);
 } 
 }
}
</code></pre>

com.jcraft.jsch.JSchException: UnknownHostKey

服务器

Windows

Linux

Java

我正在尝试使用在Java语言中建立一个SSH连接。我的代码产生了以下异常：com.jcraft.jsch.JSchException: UnknownHostKey: mywebsite.com. RSA key fingerprint is 22:fb:ee:fe:18:cd:aa:9a:9c:78:89:9f:b4...

问com.jcraft.jsch.JSchException: UnknownHostKey
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问com.jcraft.jsch.JSchException: UnknownHostKeyEN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问com.jcraft.jsch.JSchException: UnknownHostKey
EN