Newer key exchange methods supported for sftp backups
Details
| Detail name | Value |
|---|---|
| Changelog Number | 9125 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | Exasol 6.1.8, Exasol 6.2.4 |
| Resolution Date | 2020-01-16 |
New feature
The sftp/ssh implementation that is used for remote backups to sftp servers now supports authentication to the ssh/sftp server via key exchange methods based on elliptic curve cryptogrphy, such as:
- curve25519-sha256
- ecdh-sha2-nistp256
- ecdh-sha2-nistp384
- ecdh-sha2-nistp521
in addition to the previously supported diffie-hellman algorithms.
Benefits
This provides increased security and future safety and allows administrators to disable older, less secure algorithms in their ssh/sftp servers.
