Knowledge Base

Summary

X.509 certificates can be used for user authentication and for host key verification.

Use in SmartFTP 

Select certificate for user authentication

1. Go to the Favorite Properties
2. Go to the SSH dialog
3. Select Personal Certificate Store in the Public Key group
4. Select the certificate to be used

Export public key from certificate

1. Go to the Favorite Properties
2. Go to the SSH dialog
3. Select Personal Certificate Store in the Public Key group
4. Click on the Cert Manager button
5. Select the certificate you want to export
6. Click on the Export... button
7. Select No, do not export the private key
8. Click Next
9. Select Base-64 encoded X.509 (.CER) in the file format
10. Send the certificate to the server administrator

Interoperability

• Roumen Petrov's OpenSSH patch [1]
• VanDyke VShell [3]

Technical

Supported public key algorithms: x509v3-sign-rsa [1], x509v3-sign-dss [1], x509vs-sign-rsa-sha1 [2], x509vs-sign-dss-sha1 [2]

References

1. Roumen Petrov OpenSSH patch
2. SecSH: X.509 authentication in SSH
3. VanDyke VShell - Use X.509 Certificates