[Cyberduck-trac] [Cyberduck] #11255: Include port number when saving host key fingerprint

Cyberduck trac at cyberduck.io
Fri Nov 20 10:50:22 UTC 2020


#11255: Include port number when saving host key fingerprint
----------------------------+------------------------
    Reporter:  dkocher      |      Owner:
        Type:  enhancement  |     Status:  new
    Priority:  normal       |  Milestone:
   Component:  sftp         |    Version:  7.7.1
    Severity:  normal       |   Keywords:
Architecture:               |   Platform:  Windows 10
----------------------------+------------------------
 {{{
 But because you do not store the port number it will cause issues. Perhaps
 I did not explain this properly.

 For example, if you setup SSH port forwarding tunnels:

 127.0.0.1:5000 > 10.0.1.50:22
 127.0.0.1:5001 > 10.0.1.51:22
 127.0.0.1:5028 > 10.0.7.32:22
 127.0.0.1:5176 > 80.xxx.xxx.xxx:22

 These are port forwarding to unique servers with unique fingerprints.

 In mountain duck if I connect to server1 and save the fingerprint, then
 connect to server2, it will say the fingerprint has changed. If I save
 server2 fingerprint and then connect to server1, it will say the key has
 changed because it only stores the fingerprint for the IP, not IP:PORT.

 OpenSSH has supported this for over 10 years.
 }}}

 This does  not affect macOS.

--
Ticket URL: <https://trac.cyberduck.io/ticket/11255>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list