How to SFTP authenticate using password or SSH fingerprint WinSCP C# .NET assembly

Question

I'm trying to connect to a server with a SFTP connection, but I'm trying to authenticate with SSH fingerprint, if this is not correct, then should attempt with the SFTP password.

The issue that I'm having is that need both of them to access to the server, that should be different, if is not the SSH fingerprint, then try with the password, but is not working.

There is a way to validate first the fingerprint and if is not correct, validate the user password?

This is what I have:

public string FilesSFTP_FTP()
{          
   TransferOptions TransferOption = new TransferOptions();
   TransferOperationResult TransferResult;
   SessionOptions sessionoptions = new SessionOptions();
   Session session = new Session();

   if (DataFile.sTransportType == "S")
   {
      sessionoptions.Protocol = Protocol.Sftp;
      sessionoptions.PortNumber = 22;
      sessionoptions.SshHostKeyFingerprint = DataFile.sFingerPrint;
   }
   else if (DataFile.sTransportType == "F")
   {
      sessionoptions.Protocol = Protocol.Ftp;
      sessionoptions.PortNumber = 21;
   }

   sessionoptions.HostName = DataFile.sIPAddress;
   sessionoptions.UserName = DataFile.sUserID;
   sessionoptions.Password = DataFile.sPassword;
   TransferOption.TransferMode = TransferMode.Binary;
   TransferOption.PreserveTimestamp = false;
   TransferOption.ResumeSupport.State = TransferResumeSupportState.Off;

   session.Open(sessionoptions);
}

There is another property that it need to be set?

Martin Prikryl · Accepted Answer · 2021-11-04 17:20:41Z

4

You cannot "authenticate with SSH fingerprint".

The SessionOptions.SshHostKeyFingerprint is to verify the server's host key. Not to authenticate the user.

To authenticate the user, you need to use the SessionOptions.SshPrivateKeyPath.

See Understanding SSH key pairs to learn the difference.

As for your question. You can set both the SessionOptions.SshPrivateKeyPath and the SessionOptions.Password. WinSCP will first try the private key, and only if that fails, it will fall back to the password. (Or it will use both, is the server requires that)

edited Nov 4, 2021 at 17:20

answered Apr 8, 2016 at 5:58

Martin Prikryl

205k64 gold badges560 silver badges1.1k bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to SFTP authenticate using password or SSH fingerprint WinSCP C# .NET assembly

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related