如何使用没有密码的 SSH 身份验证连接到 Windows SFTP 服务器？ [复制]

Posted 2023-03-23

【中文标题】如何使用没有密码的 SSH 身份验证连接到 Windows SFTP 服务器？ [复制]

【英文标题】：How to connect to Windows SFTP server using SSH authentication without password? [duplicate]

【发布时间】：2020-02-29 20:25:03

【问题描述】：

我尝试了不同的选择：

JSch jSch = new JSch();
try 
     jSch.setKnownHosts("C:/Users/User/.ssh/known_hosts");
     jSch.addIdentity("C:/Keys/id_rsa", "pass");
     Session session = jSch.getSession("test", "127.0.0.1", 22);
     session.connect();
//   Channel channel = session.openChannel("sftp");
 catch (JSchException e) 
     e.printStackTrace();

我有一个本地服务器-OpenSSH，它安装后在目录 C:\ProgramData\ssh 中生成了几对 SSH 密钥（主机）。

然后我使用 PuTTYgen 程序自己生成了 3 个密钥（用户）：privat、public 和 authorized_keys。将 authorized_keys 密钥放在服务器的 ~/directory.ssh/ 中。

在使用 SFTP 客户端 FileZilla 和 WinSCP 时，指定了他的私人用户密钥的路径并成功连接，但在连接之前，您需要接受主机密钥。 但是在服务中是无法连接的。

jSch.setKnownHosts ("‪C:/Users/User/.ssh/known_hosts") doesn't help.

我使用了命令：

    ssh-keyscan 127.0.0.1 >> ~/.ssh/known_hosts

在 PowerShell 中生成“known_hosts”文件。 该文件包含三行：

127.0.0.1 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBK5r69e63KfNv/QYrrbaxqsDupXy5vYdTrul6Hh+4ZxpIvPOemdWkdDI26RK2Kh2FSkDJiBlItzsy14ZXVXT6/k=
127.0.0.1 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq2cC2f1vPiiobWIEofDEK7noSs1Pl7nqkzz1Qe0Q0wACtekHq3xf3rUGScw58gX/8hm2XquDhj2k/oSK+STU4llCSJ9z1MVIifL+deXh3KF9BboRbHpNGH4tMwuxqL/EppBEkwNup9nf2u9icrBwuyvb93Go4aLEGzlLCbuxubX2r0Da+NLQQ1v4NjIkwq9a7xLHTvoP3Z7VZ1K0kS9arLdGRojL1u97hZ2D6qETWYyGpK4ppMdDUqc7IEijsY5ojQ1NZa4hmxqI3og5nNyNTUfbmUmXGjy5aXN8XXbvWCdrlU27TWdy/Zb+Z0F3XCfXln8ufJUWW4aQJno320R8Z
127.0.0.1 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK2W2zOC06JQ37+2a3pBJsWruW1/FpqWpyd/yuTmUFY6

我尝试使用文件“known_hosts”的不同变体启动服务，但这没有给出解决方案。

我使用安装了 OpenSSH 服务器、PowerShell 和我的应用程序的同一帐户。 '~/.ssh/known_hosts' 指向路径'C:/Users/User/.ssh/known_hosts'。

com.jcraft.jsch.JSchException: UnknownHostKey: 127.0.0.1. RSA key fingerprint is 17:5a:76:22:e4:f2:80:69:b1:49:53:62:60:1c:fd:af
at com.jcraft.jsch.Session.checkHost(Session.java:805)
at com.jcraft.jsch.Session.connect(Session.java:345)
at com.jcraft.jsch.Session.connect(Session.java:183)
at com.example.demo.controller.Controller.writeCat(Controller.java:96)

日志文件：

Connecting to 127.0.0.1 port 22
Connection established
Remote version string: SSH-2.0-OpenSSH_for_Windows_7.7
Local version string: SSH-2.0-JSCH-0.1.54
CheckCiphers: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
CheckKexes: diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521
CheckSignatures: ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
SSH_MSG_KEXINIT sent
SSH_MSG_KEXINIT received
kex: server: curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
kex: server: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
kex: server: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
kex: server: [e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail]
kex: server: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
kex: server: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
kex: server: none
kex: server: none
kex: server: 
kex: server: 
kex: client: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
kex: client: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
kex: client: aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc
kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
kex: client: hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96
kex: client: none
kex: client: none
kex: client: 
kex: client: 
kex: server->client aes128-ctr hmac-sha1 none
kex: client->server aes128-ctr hmac-sha1 none
SSH_MSG_KEX_ECDH_INIT sent
expecting SSH_MSG_KEX_ECDH_REPLY
ssh_rsa_verify: signature true
Disconnecting from 127.0.0.1 port 22

【问题讨论】：

似乎JSch 收到的是 IP 地址，而不是您设置为已知的主机名...尝试设置您的本地主机的 IP 地址。

更改了文件 known_hosts 的路径，添加到我的问题中 + 更新了日志文件。现在尝试获取 System.out.println(Arrays.toString(j Sch.get Host Key Repository().get Host Key ())) - 返回空数组 - []。这是否意味着无法设置主机密钥？

【参考方案1】：

原来是这样连接的：

jSch.setKnownHosts(new ByteArrayInputStream("127.0.0.1 ssh-rsa AAAAB3Nza...".getBytes()));

非常感谢 Martin Prikryl 建议检查 jSch.getHostKeyRepository().getHostKey()