@@ -170,20 +170,97 @@ The command accepts the following arguments:
170
170
:optional:
171
171
172
172
Enable and configure a SSH File Transfer Protocol (``SFTP ``) server.
173
- Use multiple times to specify an address port and the path to the ssh private key to use as key -value pairs .
173
+ Use multiple times to specify each desired key-value pair .
174
174
175
- Valid keys:
175
+ The following table lists valid keys.
176
+
177
+ .. list-table ::
178
+ :header-rows: 1
179
+ :widths: 30 30 40
180
+ :width: 100%
181
+
182
+ * - Key
183
+ - Description
184
+ - Valid values
185
+
186
+ * - ``address ``
187
+ - Port to use for connecting to SFTP.
188
+ - Any valid port number, typically ``8022 ``.
189
+
190
+ * - ``ssh-private-key ``
191
+ - Path to the user's private key file.
192
+ - Absolute path or relative path from current location to the key file to use.
193
+
194
+ * - ``pub-key-algos ``
195
+ - Comma-separated list of the public key algorithms to support.
196
+ -
197
+ .. code-block :: text
198
+
199
+ ssh-ed25519
200
+
201
+
202
+ ecdsa-sha2-nistp256
203
+ ecdsa-sha2-nistp384
204
+ ecdsa-sha2-nistp521
205
+ rsa-sha2-256
206
+ rsa-sha2-512
207
+ ssh-rsa
208
+ ssh-dss
209
+
210
+ * - ``kex-algos ``
211
+ - Comma-separated list in priority order of the key-exchange algorithms to support.
212
+ -
213
+ .. code-block :: text
214
+
215
+ curve25519-sha256
216
+
217
+ ecdh-sha2-nistp256
218
+ ecdh-sha2-nistp384
219
+ ecdh-sha2-nistp521
220
+ diffie-hellman-group14-sha256
221
+ diffie-hellman-group16-sha512
222
+ diffie-hellman-group14-sha1
223
+ diffie-hellman-group1-sha1
224
+
225
+ * - ``cipher-algos ``
226
+ - Comma-separated list of cipher algorithms to support
227
+ -
228
+ .. code-block :: text
229
+
230
+ aes128-ctr
231
+ aes192-ctr
232
+ aes256-ctr
233
+
234
+
235
+
236
+ arcfour256
237
+ arcfour128
238
+ arcfour
239
+ aes128-cbc
240
+ 3des-cbc
241
+
242
+ * - ``mac-algos ``
243
+ - Comma-separated list in preference order of MAC algorithms to support.
244
+ Based on `RFC 4253 section 6.4 <https://www.rfc-editor.org/rfc/rfc4253 >`__ with the exception of ``hmac-md5 `` variants, which are end of life.
245
+ -
246
+ .. code-block :: text
247
+
248
+
249
+
250
+ hmac-sha2-256
251
+ hmac-sha2-512
252
+ hmac-sha1
253
+ hmac-sha1-96
176
254
177
- - ``address ``, which takes a single port to use for the server, typically ``8022 ``
178
- - ``ssh-private-key ``, which takes the path to the user's private key file
179
255
180
256
For example:
181
257
182
258
.. code-block :: shell
183
259
:class: copyable
184
260
185
- minio server http://server{1...4}/disk{1...4} \
186
- --sftp=" address=:8022" --sftp=" ssh-private-key=/home/miniouser/.ssh/id_rsa" \
261
+ minio server http://server{1...4}/disk{1...4} \
262
+ --sftp=" address=:8022" --sftp=" ssh-private-key=/home/miniouser/.ssh/id_rsa" \
263
+ --sftp=" kex-algos=diffie-hellman-group14-sha256,[email protected] " \
187
264
...
188
265
189
266
.. mc-cmd :: --certs-dir, -S
0 commit comments