[CAMEL-11611] Add a knownHosts option to the camel-ssh component

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.20.0
• Component/s: camel-ssh
• Labels: known_hosts ssh

Environment

Any.

• Estimated Complexity: Novice
• Assignee: Andrea Cosentino
• Reporter: Daniel U. Thibault
• Created: 27/Jul/17 14:54
• Updated: 03/Sep/17 07:47
• Resolved: 03/Sep/17 07:47

Description

Currently, when one uses camel-ssh to connect to some server, one gets this message:

[sshd-SshClient[5be46f9d]-nio2-thread-1] WARN org.apache.sshd.client.keyverifier.AcceptAllServerKeyVerifier - Server at /<host>:<port> presented unverified EC key: ...

This is an annoyance that would readily be gotten rid of by adding a knownHosts option similar to certResource:

• name: knownHosts
• default value: null
• description: Path reference to a the list of known hosts public key certificates (typically ~/.ssh/known_hosts). Prefix path with classpath:, file:, or http:.

This value would be used by StaticServerKeyVerifier.java to avoid issuing the warning (as appropriate). com.jcraft.jsch.JSch uses this through its setKnownHosts method.

Issue Links

• links to: GitHub Pull Request #1887