Cipher configuration in sshj

[karthickm512]

Hi, we use sshj as sftp client in my product. running on RHEL. Is there a way to specify/pass on the recommended cipher suites to be used while connecting with sftp server?

[uttamgupta]

Suppose you want to create fips configuration, create new default config and set according to your requirements.
Config fipsConfig = new DefaultConfig();

    // Use a list for cipher factories
    fipsConfig.setCipherFactories(
            Arrays.asList(
                    BlockCiphers.AES128CBC(),
                    BlockCiphers.AES192CBC(),
                    BlockCiphers.AES256CBC(),
                    BlockCiphers.AES192CTR(),
                    BlockCiphers.AES256CTR()));

    // Use updated MAC factories
    fipsConfig.setMACFactories(Arrays.asList(Macs.HMACSHA2256()));

    // Optionally configure other algorithms (Key Exchange, etc.) to comply with FIPS
    fipsConfig.setKeyExchangeFactories(Arrays.asList(
            new DHGexSHA256.Factory(),
            new ECDHNistP.Factory256(),
            new ECDHNistP.Factory384(),
            new ECDHNistP.Factory521()));
    // for host key algorithm
    fipsConfig.setKeyAlgorithms(
            Arrays.asList(
                    SSHRSA(),
                    SSHDSA(),
                    ECDSASHANistp256(),
                    ECDSASHANistp384(),
                    ECDSASHANistp521()));

    // you can create client using this function:
    final SSHClient ssh = new SSHClient(fipsConfig);
    ssh.loadKnownHosts();
    ssh.connect("localhost");
    try {
        ssh.authPublickey(System.getProperty("user.name"));

        // Present here to demo algorithm renegotiation - could have just put this before connect()
        // Make sure JZlib is in classpath for this to work
        ssh.useCompression();

        final String src = System.getProperty("user.home") + File.separator + "test_file";
        ssh.newSCPFileTransfer().upload(new FileSystemFile(src), "/tmp/");
    } finally {
        ssh.disconnect();
    }