Opened 7 years ago

Last modified 7 years ago

#2075 closed enhancement

Add support for SHA-256 fingerprints on file servers — at Initial Version

Reported by: Nicklas Nordborg Owned by: everyone
Priority: major Milestone: BASE 3.11
Component: core Version:
Keywords: Cc:

Description

The current implementation only supports MD5 but newer versions of OpenSSH defaults to SHA-256.

Since BASE itself is not using the fingerprint for anything, we only need to update the checks in the FileServer.setFingerprint() method to allow SHA-256 fingerprints as well.

SHA-256 is typically Base64-encoded which creates string with 44 characters. Fortunately we already allow the fingerprint to be 47 characters since that is what we get from the MD5 fingerprint (including the colons).

Extensions and plug-ins that actually use file servers for connections via SSH need to be updated with support for SHA-256. See:

  • xfiles
  • opengrid

Change History (0)

Note: See TracTickets for help on using tickets.