<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>Thanks Nacim:<br><br>I had found the supported ciphers. <br>However, I'm unclear as to how to present a subclassed SSHTransport to the SFTPServer.<br><br>(And, once I understand how I will issue a documentation bug with details...)<br>--Ray<br><br><br><hr id="zwchr"><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px; color: rgb(0, 0, 0); font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Flint" <grindizer@gmail.com><br><b>To: </b>"Ray Cote" <rgacote@appropriatesolutions.com>, "Twisted general discussion" <twisted-python@twistedmatrix.com><br><b>Sent: </b>Wednesday, October 30, 2013 5:39:44 AM<br><b>Subject: </b>Re: [Twisted-Python] Limiting cipher options for SSH/SFTP<br><br><div dir="ltr"><div>Hi <br><br></div><div>I have not used it myself but this seems what you're looking for: <a href="http://twistedmatrix.com/documents/13.0.0/api/twisted.conch.ssh.transport.SSHTransportBase.html#supportedCiphers" target="_blank">http://twistedmatrix.com/documents/13.0.0/api/twisted.conch.ssh.transport.SSHTransportBase.html#supportedCiphers</a><br>
</div><div>I guess you need to subclass SSHTransport and give it the list of ciphers you want.<br><br>--<br></div><div>Nacim.<br></div><div><br></div><div><br><br></div><br><br><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">
2013/10/29 Ray Cote <span dir="ltr"><<a href="mailto:rgacote@appropriatesolutions.com" target="_blank">rgacote@appropriatesolutions.com</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I need to limit the ciphers offered for an ssh/sftp connection.<br>
<br>
class ESFTPServerForUnixConchUser(SFTPServerForUnixConchUser):<br>
"""Main local proxy class for file transfer access.<br>
<br>
Many methods are overriden to support file encryption and<br>
encrypted file name mappings.<br>
"""<br>
<br>
def __init__(self, avatar):<br>
"""Initialize class with avatar representing user information"""<br>
SFTPServerForUnixConchUser.__init__(self, avatar)<br>
<br>
I'm unclear as to how to restrict which ciphers to use at this level.<br>
<span class="HOEnZb"><font color="#888888">--Ray<br>
<br>
--<br>
Ray Cote, President Appropriate Solutions, Inc.<br>
We Build Software<br>
<a href="http://www.AppropriateSolutions.com" target="_blank">www.AppropriateSolutions.com</a> <a href="tel:603.924.6079" target="_blank">603.924.6079</a><br>
<br>
_______________________________________________<br>
Twisted-Python mailing list<br>
<a href="mailto:Twisted-Python@twistedmatrix.com" target="_blank">Twisted-Python@twistedmatrix.com</a><br>
<a href="http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python" target="_blank">http://twistedmatrix.com/cgi-bin/mailman/listinfo/twisted-python</a><br>
</font></span></blockquote></div><br></div>
</blockquote><br><br><br>-- <br><div><span name="x"></span>Ray Cote, President Appropriate Solutions, Inc. <br>We Build Software <br>www.AppropriateSolutions.com 603.924.6079 <span name="x"></span><br></div></div></body></html>