Skip to content

Commit 344e656

Browse files
authored
Adds three new sets of algorithm definitions for sftp (#1225)
Partially addresses #1201
1 parent c2736b1 commit 344e656

File tree

1 file changed

+83
-6
lines changed

1 file changed

+83
-6
lines changed

source/reference/minio-server/minio-server.rst

+83-6
Original file line numberDiff line numberDiff line change
@@ -170,20 +170,97 @@ The command accepts the following arguments:
170170
:optional:
171171

172172
Enable and configure a SSH File Transfer Protocol (``SFTP``) server.
173-
Use multiple times to specify an address port and the path to the ssh private key to use as key-value pairs.
173+
Use multiple times to specify each desired key-value pair.
174174

175-
Valid keys:
175+
The following table lists valid keys.
176+
177+
.. list-table::
178+
:header-rows: 1
179+
:widths: 30 30 40
180+
:width: 100%
181+
182+
* - Key
183+
- Description
184+
- Valid values
185+
186+
* - ``address``
187+
- Port to use for connecting to SFTP.
188+
- Any valid port number, typically ``8022``.
189+
190+
* - ``ssh-private-key``
191+
- Path to the user's private key file.
192+
- Absolute path or relative path from current location to the key file to use.
193+
194+
* - ``pub-key-algos``
195+
- Comma-separated list of the public key algorithms to support.
196+
-
197+
.. code-block:: text
198+
199+
ssh-ed25519
200+
201+
202+
ecdsa-sha2-nistp256
203+
ecdsa-sha2-nistp384
204+
ecdsa-sha2-nistp521
205+
rsa-sha2-256
206+
rsa-sha2-512
207+
ssh-rsa
208+
ssh-dss
209+
210+
* - ``kex-algos``
211+
- Comma-separated list in priority order of the key-exchange algorithms to support.
212+
-
213+
.. code-block:: text
214+
215+
curve25519-sha256
216+
217+
ecdh-sha2-nistp256
218+
ecdh-sha2-nistp384
219+
ecdh-sha2-nistp521
220+
diffie-hellman-group14-sha256
221+
diffie-hellman-group16-sha512
222+
diffie-hellman-group14-sha1
223+
diffie-hellman-group1-sha1
224+
225+
* - ``cipher-algos``
226+
- Comma-separated list of cipher algorithms to support
227+
-
228+
.. code-block:: text
229+
230+
aes128-ctr
231+
aes192-ctr
232+
aes256-ctr
233+
234+
235+
236+
arcfour256
237+
arcfour128
238+
arcfour
239+
aes128-cbc
240+
3des-cbc
241+
242+
* - ``mac-algos``
243+
- Comma-separated list in preference order of MAC algorithms to support.
244+
Based on `RFC 4253 section 6.4 <https://www.rfc-editor.org/rfc/rfc4253>`__ with the exception of ``hmac-md5`` variants, which are end of life.
245+
-
246+
.. code-block:: text
247+
248+
249+
250+
hmac-sha2-256
251+
hmac-sha2-512
252+
hmac-sha1
253+
hmac-sha1-96
176254
177-
- ``address``, which takes a single port to use for the server, typically ``8022``
178-
- ``ssh-private-key``, which takes the path to the user's private key file
179255
180256
For example:
181257

182258
.. code-block:: shell
183259
:class: copyable
184260
185-
minio server http://server{1...4}/disk{1...4} \
186-
--sftp="address=:8022" --sftp="ssh-private-key=/home/miniouser/.ssh/id_rsa" \
261+
minio server http://server{1...4}/disk{1...4} \
262+
--sftp="address=:8022" --sftp="ssh-private-key=/home/miniouser/.ssh/id_rsa" \
263+
--sftp="kex-algos=diffie-hellman-group14-sha256,[email protected]" \
187264
...
188265
189266
.. mc-cmd:: --certs-dir, -S

0 commit comments

Comments
 (0)