J2SSH Core library - Unable find other custom key exchange algorithms implementation - j2ssh

I am searching the implementation of key exchange algorithms for j2ssh core 0.2.9 as below.
diffie-hellman-group-exchange-sha1
diffie-hellman-group14-sha1
diffie-hellman-group1-sha1
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
Above all should be able to supports j2ssh core library version 0.2.9 and able to add them like how the existing j2ssh core library using key algorithm i.e DhGroup1Sha1 by default
Currently, In my application, I am using j2ssh core library version[0.2.9]. Switching to other j2ssh library is not feasible for me due to some time constraints.
Please help me out if you have any good solution

Your using an outdated API. The original J2SSH API has not been maintained for over a decade and I would strongly suggest you stop using it. And I'm saying this as the original author of that API.
Since your using SSH you are concerned with keeping your connections secure therefore you should be using an up to date API that implements the latest security and practices.
There is a replacement API that is maintained currently and supports these key exchange algorithms at https://github.com/sshtools/j2ssh-maverick

Related

Accessing Cloud Datastore from Qt app

I've developed a REST API back end using Endpoints-Proto-Datastore, which wraps the Cloud Endpoints Python API. I'm starting to look at Qt and trying to get an idea what will be involved in accessing my API from the Qt networking or other library. Might it be nearly as straightforward as is making the calls from the command line using the Python Client library, which even handles OAuth2 flows? This would be very nice. I might use PyQt if this makes things simpler.
Your Endpoints service can generate an OpenAPI specification file which describes the API. Once you do this, there are many OpenAPI-compatible packages which can generate client code for you.
I located this document which gives a pretty good overview for my purposes:
"The Google APIs Client Library for C++ will automatically take care of many of the tedious details for interpreting and complying with the discovery documents so that you can write simpler and familiar C++ code."
Now it's a matter of building and installing the C++ client and then figuring out how to generate the client library and access it from a Qt application. But that is beyond the scope of this question.

Windows App and Asp.Net Encryption

I developed a asp.net webservice for a Xamarin app. I used a encryption class based on System.Security.Cryptography library
Now I want to develop the Universal App version, but I need to use Windows.Security.Cryptography library
I know they are different libraries, but there is a way to encrypt and decrypt in the same way? Or if not, there is any common library?
Thanks
Take a look at PCLCrypto. With that you can use the same library for all the different project types. The library doesn't implement any cryptographic algorithms itself but relies on the platform specific implementations, so it's as safe to use as what you're doing now.

Bypassing JCE Policy Files

In my current project I need to use a strong PBE encryption algorithm, as asked by the client. But for that to work, I would need to install JCE Policy Files on each machine I want to deploy on. Based on the amount of machines, that is NOT a valid option for it to be "copy-and-run deployment".
How to avoid installing "Unlimited Strength" JCE policy files when deploying an application?
The solution there provided by using reflection to override JCE validations works perfectly, but only on J7 or above.
However, the entire project is designed for Java6 (we have already tried to upgrade it, without success). So the elements used in the reflection solution are not even present.
I'm currently using Jasypt + BouncyCastle for a StandardPBEStringEncryptor, with PBEWITHSHA256AND256BITAES-CBC-BC.
Is there a way to bypass the JCE restriction on Java6 by using reflection (or any other method that does not involve patching the JVM or getting an international Government Approval)?

SOA: service API discover

At work, me and my colleagues, uses geterogenous SOA. We do not use WS, prefering REST and some binary and JSON-based protocols. Due to it, we do not have WSDL-scheme of our service interfaces.
We faced problem providing information about services to our developers, cause they code in different languages, and not always posess information about all services.
The question is - how to solve this problem?
Organize wiki-system, describing each service separately? Store wsdl-like definitions in service registry? What is the best approach?
You may try "Swagger" a framework implementation for describing RESTful web services licensed under the Apache License, Version 2.0 https://developers.helloreverb.com/swagger/

Consuming web services in Lotus Notes 6.5

How can we consume any web services in Lotus Notes 6.5. I have seen reference to Soap Connect API. Is it the only way to do it..?
Any example will be a great help..
Thanks..
There is no out of the box solution for LotusScript and WS Consumers in R6. You would need to create your own system to shape the SOAP request, send it to the server and parse the SOAP response.
You are not going to get the benefits from using Web Services in this fashion. The whole point is that you should not have to do this.
If you use the Java route you can use Apache Axis libraries to add consuming functionality.
http://axis.apache.org/axis/
Here is a very old developerworks article on it:
http://www.ibm.com/developerworks/lotus/library/domino-webservices/
Ultimately though I'd recommend to upgrade to a later version that does support WS consumers in LotusScript. Although be aware that LS suffers in WS due to limitations of the programming language.
What I did in R6 is creating Web based agents using LotusScript which behaved like Web Services. It performed rather good for services that weren't called by too many users at the same time (as far as I remeber...)-
This presentation / sample might be helpful for you:
http://www.slideshare.net/billbuchan/jmp206-lotus-domino-web-services-jumpstart#btnNext
Full files from Bill's presentation including sample are available for download here:
http://www.hadsl.com/HADSL.nsf/Documents/Lotusphere+2008+-+JMP206+-+Web+Services+Bootcamp!OpenDocument
Another helpful link (if you want to use SOAP/Java):
http://www.ibm.com/developerworks/lotus/tutorials/lswsdom65/lswsdom65-pdf.pdf
If you are on Windows, you can use a COM object in LotusScript to call the webservice.
A good one that I used myself is PocketSOAP: http://www.pocketsoap.com/ . It has a lot of features, like support for https, using SOAP headers and sending attachments.
Many of PocketSOAPs features are unavailable or difficult to achieve even in a native R8 web service consumer, so this is an option for higher versions than Lotus Notes 6.5, too.

Resources