Encryption using SSH in PI 7.31 single stack

[Former Member]

Hi Experts,

The receiver system is generating the public/private key pairs using cuteFTP using by following the screens sequentially attached here.

Step 1:- open cuteFTP Tools --> Global options

Step 2: Select the paths for public & private key pairs, then click on Create identity file. Then they have chosen key type as "RSA".

Step 3: They gave input of pass phrase and click next.

Step 4: Then they gave name to public & private keys and clicked Finish.

They gave key size as 1024 and key type as RSA. More over they selected security type as SSH2 security but not openPGP security .

So can I use the public key generated using these ways SAP PI receiver comm. channel to encrypt the data before pushing to receiver FTP folder?

Here the scenario is drag and drop the xls file generated on application server of ECC and push the encrypted file using public key generated as above to a folder in FTP server form where the bank transfers the file to their servers. Please suggest the ways to do it

Thanks,

Nithin.

[Former Member]

Hi Nithin,

AFAIK SSH2 is supported in SFTP adapter, at least the page 9 of this document assures that: http://a248.g.akamai.net/n/248/420835/6661b9a28841075fe03239c02eb6a36c6a26dd37bd71dc202a47287abd468e...

And in this wiki, the author has generated it and test it Generating SSH Keys for SFTP Adapters - Type 1 - Process Integration - SCN Wiki

Check Shabarish blog as well:

Regards.

[Former Member]

Hi Inaki, Experts,

The message flow looks like this:

PI should post the encrypted files that is pulled from ECC to Intermediate server[Inter-Server] from where the 3rd party transfers the files using a software installed on Inter-Server. Also the same software installed on Inter-server generates the public/private key pairs using SSH RSA and key size 1024. But is it possible to achieve the encryption using the public key generated as described since it is generated using SSH RSA ?

Thanks,

Nithin.

[Former Member]

Hello Nithin,

Should be possible.

Ensure the key generation falls under the algorithm mentioned in the link.