Security Basics mailing list archives

RE: Secure FTP Client


From: "Jeff Gercken" <JeffG () kizan com>
Date: Thu, 11 Nov 2004 08:58:18 -0500


If you desire to use scp/sftp transfers in an unattended batch script
you may run into a snag that I had. (and just resolved yesterday).  An
important part of the SSH protocol is two way authentication.  The
server is authenticated by providing its public key and most software
asks you to confirm it by displaying its fingerprint.  After the first
session that key is cached and you're never asked again (unless the
server key changes)

My problem was that I wanted to use scp to transfer files from a target
during an evaluation.  I love putty and wanted to use pscp but putty
caches the server fingerprint in the registry and there is no way to
bypass the check or feed it the fingerprint in any other way.  Their
solution is to insert keys into the registry but I have no business
doing that on a client's server.

The solution came with scp.com's client that caches everything into a
file and a switch is available to point to an alternate file location.
So in the batch script's working directory I provide scp2.exe a
certificate and the server's fingerprint.  Finally I have unattended,
scripted scp/sftp transfers from win32!

Hope this helps someone.
-Jeff

----- Originalnachricht -----
Von: sf_mail_sbm () yahoo com
Datum: Dienstag, 9. November  2004, 7:20
Betreff: Secure FTP Client





Hi List,



I am looking for a Secure-FTP client for Windows which I can use 
to connect to a Secure-FTP server which is an AIX machine running 
Open-SSH



I know there are lots of FREE tools out there, but my company 
prefers 

to pay for a commercial product "for security reasons"



Just wanted to get an idea of the tools that you have already used



Our requirement would be one which is command-line so that we can 
write 

batch files to automate file downloads



I had a look at WS_FTP and CuteFTP but these do not suit our 
requirements


Thanks to all

Ronish



Current thread: