You are reading a single comment by @JB and its replies.
Click here to read the full conversation.
-
PVK is just a proprietary file format for storing RSA private keys. There's nothing inherently wrong with that being the basis of encryption - it depends on how they use it. If GoAnywhere is using them to create SFTP connections then it's using the SSH protocol and that's the important thing.
That settled, do you have a reason to think GoAnywhere is storing those keys in an insecure manner? That would be an issue.
itsbruce
@JB
Wondering if anyone can help with something weird I've come across. Very long story a little bit shorter:
We currently have scheduled tasks in conjunction with PowerShell scripts utilizing Posh-SSH to ship files to and from vendors. Its becoming quite difficult to manage and monitor, so we're looking at alternatives. Something we're looking at, as it ticks all of our boxes is: https://www.goanywhere.com/
Most of our large vendors, such as JPMorgan Chase, use SSH keys, for obvious reasons.
This software, GoAnywhere, supposedly only accepts .pvk keys for connecting to SFTP sites. Now, I can find so little real documentation about .pvk that I'm almost immediately inclined to stop looking at GoAnywhere at all.
What I do know is that .pvk keys and SSH keys are used for two completely different things. SSH for secure shell access - obviously and .pvk are used for code signing in Windows,
Am I being unreasonable in kicking this platform to the curb because of this? We've had a demo open with them for almost two weeks now and they have so far been unable to provide us any real documentation in why they use .pvk, how to get keys into .pvk properly, without jumping through multiple conversion hoops and so on. Their initial suggestion was to rename examplekey.ssh to examplefile.pvk. Facepalm. When we asked if they have a resource who can assist they said: This is normally not something we do on the Sales side because most IT shops have this process ironed out. Which I thought was such a strange response because nobody is out here using .pvk keys for SSH connections.
Does anyone have any suggestions for file moving software that works with standard SSH keys? Be it .ssh, .ppk or whatever else.