SFTP

  • 12 Oct

    SFTP Fingerprint option added to Limagito file mover

    Q: I have a question related to SFTP fingerprints. When I create a new rule and add new Source -> SFTP, where can I configure the fingerprints of the Source host’s fingerprint? I would like to be sure that the server is valid.

    A: We allow the fingerprint of the sftp server you added as source automatically. At this moment there is no option to add fingerprints of the host manually.

    Q: Thanks for the very quick answer. Hopefully it will be possible on the next version. There is a possibility for MiTM attack.

    A: In version v2024.10.12.0 we added the Fingerprint option for SFTP as Source and Destination.

    The goal of the fingerprint is to verify the authenticity and integrity of the SFTP server you’re connecting to. This is a short, unique representation (a hash) of the server’s public key. The purpose of this fingerprint is to help you confirm that you’re connecting to the correct server and not a malicious or imposter server. This is optional and by default we allow any fingerprint.

    E.g.

    The default Hash Algorithm is MD5

    68:ff:d1:4e:6c:ff:d7:b0:d6:58:73:85:07:bc:2e:d5

    Please add one if the following prefixes to adjust the default Hash Algorithm:

    SHA256:
    SHA384:
    SHA512:
    SHA1:
    SHA3-224:
    SHA3-256:
    SHA3-384:
    SHA3-512:

    limagito file mover sftp fingerprint option

    • In case you receive an error message regarding the Fingerprint Compare, please increase the RunTime Log Level to ‘Debug’:

    Limagito file mover Logging option

    limagito file mover runtime log setup

    • RunTime Log example:
      • If the the fingerprint in your SFTP setup is not correct, the following error message will appear
      • Increasing the log level of the RunTime log will show you the Fingerprint the SFTP server is sending
      • You can compare this to the one in your setup, in the example below we used the SHA256 hash algorithm

    limagito file mover runtime log sftp fingerprint

    If you need any help with this request, please let us know.

    Best Regards,

    Limagito Team

    #sftp #managedfiletransfer #filetransfer #filemanagement

    By Limagito-Team SFTP ,
  • 13 Oct

    Limagito SFTP Server Public Key Authentication

    Q: SFTP Server Public Key Authentication. Quick question regarding limagito and it’s SFTP server. Is it possible to configure an ssh key instead of using user / password?
    A: In version v2021.10.13 we added the possibility to use Public Key authentication with our SFTP server.

    We used PuTTY Key Generator to create a Public and Private key file. Click the ‘Generate’ button and move your mouse around. Afterwards we added a passphrase and saved the public and private key to a file.

    Limagito File Mover Putty SSH Keys

    Saved .ppk files:

    Limagito File Mover Putty SSH Key files

    Next open the SFTP Server Setup and select the ‘Accounts’ tab. Choose the User Account which you want to add the Public Key file to. Select the Public Key File and do not forget to click the ‘Save’ button of the ‘User Account Setup’ (at the top).

    Limagito SFTP Server Public Key Authentication

    Click ‘Save’ button at the bottom to close the SFTP Server Setup

    If you want to be sure that the Publice Key file was loaded correctly then you please check the SFTP server Log.

    To enable logging of the SFTP Server (Logging Tab):

    Limagito SFTP server Logging

    We used the default log folder. It is never ever a good idea to put a log file on a network share, please always use a local drive.

    Limagito File Mover Logging

    SFTP Server log content, search for ‘Public Key’. In our case no loading error, so we are good to go.

    Limagito SFTP Server log content

    We tested the Public Key Authentication using our own File Mover. Be sure to select our second API Vendor: Vendor 2 – CK.

    Limagito File Mover SFTP Setup

    Select the ‘Security’ Tab and add your Private Key File and Private Key Password (only if you added a password/passphrase to this file).

    Limagito File Mover SFTP Private Key File

    Previous information about our SFTP server option: Limagito SFTP Server

    #FileTransfer #SFTP

    If you need any info about the ‘SFTP Server Public Key Authentication’ option, please let us know.

    Best regards,

    Limagito Team

  • 22 May

    Limagito SFTP Server released in version v2021.5.22.0

    In version v2021.5.22.0 we released our Limagito SFTP Server. This SFTP server is a part of Limagito File Mover and available for all +Plus users (Free Lite+, Single+, Site+ and Corporate+).

    Current Features:

    • Authentication:
      • Username & Password authentication.
    • User Accounts
      • Free Lite+ version is restricted to 5 Accounts
      • User Groups
      • User specific directory
      • Permissions (List, Make Dir, Remove Dir, Read, Write, …)
      • Password or Public Key Authentication
    • Host Key, supported types:
      • SSH-RSA Key Type
    • Security, supported SSH Algorithms:
      • Encryption: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc
      • Data Integrity: hmac-sha2-256,hmac-sha1,hmac-md5
      • Key Exchange: diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
      • Signature: hmac-sha2-256,hmac-sha1,hmac-md5
    • Guard (Protection)
      • Block brute force attacks
      • Limit connections per IP / time interval
      • Black IP list and White IP list
      • Login delay: Incremental, Random, ..
    • Detailed Logging
    •  Additional
      • Session TimeOut
      • Minium Thread Count
      • Maximum Thread Count
      • Maximum Connection Queue
      • Maxium Return Files
      • Throughput Limit
      • Character Set

    Our To-Do List:

    • Customer requests

    We added some screenshots of the SFTP Server options to give you an idea about the current status.

    -Please open the setup: select Server > SFTP Server menu item:

    Limagito SFTP Server option

    • Server Setup:

    Limagito SFTP Server Setup

    • User Accounts Setup:
      • The Free Lite+ version is restricted to 5 Accounts

    Limagito SFTP Server User Accounts

    • Host Key Setup:

    Limagito SFTP Server Host Key Setup

    • Security Setup

    Limagito SFTP Server Security

    • Guard Setup (Protection):

    Limagito SFTP Server Guard Protection

    • Common Setup:

    Limagito SFTP Server Common options

    • Logging Setup:

    Limagito SFTP Server Logging Options

    Limagito SFTP Server Log File

    • IMPORTANT: When testing the SFTP Server using our Limagito File Mover you’ll need to select the Second API Vendor – CK.

    Limagito SFTP Client Setup

    Limagito SFTP Client RunTime Log

    #FileTransfer

    If you need any info about this new feature, please let us know.

    Best regards,

    Limagito Team

    By Limagito-Team SFTP ,
1 2 3 4 5
SEARCH