Secure Ftp  Java Style Rev004
Upcoming SlideShare
Loading in...5
×
 

Like this? Share it with your network

Share

Secure Ftp Java Style Rev004

on

  • 1,993 views

 

Statistics

Views

Total Views
1,993
Views on SlideShare
1,961
Embed Views
32

Actions

Likes
0
Downloads
11
Comments
0

3 Embeds 32

http://s3curitys0lutions.com 28
http://www.s3curitys0lutions.com 3
http://www.linkedin.com 1

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Secure Ftp Java Style Rev004 Presentation Transcript

  • 1. Secure FTP JAVA Style BY RICH HELTON (SUN CERTIFIED (SC) JAVA PROGRAMMER, SC JAVA DEVELOPER, SC ENTERPRISE ARCHITECT) January 2010
  • 2. Secure Java FTP (Java Style)
  • 3. JFtp– Java Network Browser
    • The program can be found at http://j-ftp.sourceforge.net/
    • The source code can be found at http://sourceforge.net/projects/j-ftp/files/ .
  • 4. Benefits of JFtp
    • Can run the Java code from the browser through “Web Start”.
    • Can download the JAR file and run it locally.
    • Cross Platform. Runs easily on Mac OSX, Linux, Windows, etc.
    • Runs multiple protocols, SFTP, SMB, NFS, HTTP, and various transfer protocols.
    • Open Source so the code can be used to execute batch jobs.
    • Free to use.
  • 5. To Launch or Download
    • JFtp can be run directly from the browser or downloaded.
  • 6. To Launch
    • Clicking on “Launch via Java Web Start” will launch the JFtp from the browser.
    • Java must be able to run from the local Browser.
    • If so a Security Warning will pop up:
  • 7. To Launch
    • After clicking the “Run” button.
    • JFtp Starts:
  • 8. To Launch
    • Clicking on File->Connect to SFTP Server…..
    • SFTP Configuration Starts:
  • 9. Matching
    • When configuring SFTP, the ports, encryption, and authentication must match the server configuration for handshaking.
    • The source for the dialog box can be found at http://kickjava.com/src/net/sf/jftp/gui/hostchooser/SftpHostChooser.java.htm
  • 10. Testing
    • One method to test locally is to pull down OpenSSH on a test machine.
    • OpenSSH can be found at http://www.openssh.com/ .
    • Using OpenSSH, users and groups can be created using:
    • C:Program FilesOpenSSHin>mkpasswd -l -u RichH >> ..etcpasswd
    • C:Program FilesOpenSSHin>mkgroup -l >> ..etcgroup
    • Starting open SSH is done with:
    • Verify it is started:
  • 11. Testing
    • Let’s connect through SFTP:
    • If Successful, the log window will tell you:
  • 12. Testing SSH
    • Let’s connect SSH through Tools->SSH Shell…:
    • If Successful, the SSH Shell will appear:
  • 13. JAR File
    • Instead of running from the “Web Start”, a JAR file can be used to run it using the “java –jar jtp.jar” command.
    • If Java is configured correctly, the JFtp will run in a Java Console that works like the “Web Start” version.
    • Some information about the GUI may be displayed:
  • 14. Compiling Java
  • 15. Compiling at the JFtp Code
    • The source code can be found at http://sourceforge.net/projects/j-ftp/files/ .
    • Unzip the source, cd to j-ftp and ensure that the build.xml file is present:
    • Build.xml is the build file, similar to a “make” file for “C”, that Apache Ant will use to build and deploy the files.
  • 16. ANT
    • Ant is a Java library and command-line tool. Ant's mission is to drive processes described in build files as targets and extension points dependent upon each other. The main known usage of Ant is the build of Java applications.
    • It can be found http://ant.apache.org/
  • 17. Building
    • After installing Ant, run it in the build.xml directory:
  • 18. Running
    • The build will create a jtfp.jar file in the builds/jars directory.
    • This file can be run with the “java –jar jftp.jar” command.
  • 19. Editing JFTP
  • 20. Looking at the JFtp Code
    • The review Java Code, I usually use Jedit, because it is a simpler editor, found at http://www.jedit.org/ .
    • Eclipse is also one of the most Java Editor, found at http://www.eclipse.org/ . More information can be found at http://en.wikipedia.org/wiki/Eclipse_ide .
    • These editors are Open Source with any plugins for coding.
    • The main file will be found at “srcjava etsfjftpJFtp.java”.
    • Notice that the “package” name is “net.sf.jftp” which will define where the file has to live as well, as will as where the files will be placed in the JAR.
  • 21. Looking at the JFtp Code
    • Jedit on JFtp.java:
  • 22. Looking at the JFtp Code
    • To get UML diagrams of the code, ArgoUML can be used to parse the code to display the diagrams.
    • ArgoUML is an Open Source UML Modeler found at http://argouml.tigris.org/ .
  • 23. UML
    • The Unified Modeling Language (UML) is used to visualize the software and how it works in a standardized blueprint. An example Use case:
  • 24. ArgoUML
  • 25. Javadocs
    • Javadocs is a document generating tool that is part of Java that generates HTML files describing the Java code. Referenced from http://en.wikipedia.org/wiki/Javadocs .
    • This is a way to self document the code. Inserting macros and comments in the code will create an HTML browse able view of the code:
  • 26. Free Samples, as always
    • JFtp provides free sample code if you don’t want to use the GUI.
    • Under the doc directory, FTPDownload.java provides a download examples, and FTPUpload.java provides a upload example.
    • The “Web Start” code can also be found in this directory in the code “jftp.jnlp”
    • Information on the Java Network Launching Protocol can be found at http://en.wikipedia.org/wiki/.jnlp .
  • 27. Compiling FtpDownload
    • Make sure that the jftp.jar is in the classpath and compile the FtpDownload.java.
  • 28. JFtp Libraries
  • 29. JFtp makes use of 2 different Java Libraries
    • JFtp uses a library for Jcraft’s “jsch” library, which is their Java Secure Shell, when the “Use JSch instead of j2ssh” is selected:
  • 30. JSch
    • The JSch package is found at http://www.jcraft.com/jsch/
    • Otherwise the standard j2ssh library is used found at http://sourceforge.net/projects/sshtools/ .
    • Both libraries support the Secure Copy Protocol (SCP) for copying files through SSH.
    • JFtp creates wrappers in its net.sf.jtp.net.wrappers for use of such classes as SftpConnection, NfsConnection, HttpTransfer, Sftp2Connection, etc. that does the connection, downloading, uploading, change directory, remove directory and other work.
  • 31. JSch
    • The JSch package is found at http://www.jcraft.com/jsch/
    • Otherwise the standard j2ssh library is used found at http://sourceforge.net/projects/sshtools/ .
    • Both libraries support the Secure Copy Protocol (SCP) for copying files through SSH.
    • JFtp creates wrappers in its net.sf.jtp.net.wrappers for use of such classes as SftpConnection, NfsConnection, HttpTransfer, Sftp2Connection, etc. that does the connection, downloading, uploading, change directory, remove directory and other work.
  • 32. Sftp2Connection Class
    • One of the wrapper classes that uses the Jsch library is the Sftp2Connection class.
    • This class has functionality for login, setLocalPath, upload, download, and more.
  • 33. Sftp2Connection upload snippet public static void main(String[] args) { String username = "RichH"; String password = ”password"; Sftp2Connection conn = new Sftp2Connection("localhost", ""+22, null); conn.login(username,password); System.out.println("PWD:" +conn.getPWD()); System.out.println("Local Path:"+conn.getLocalPath()); conn.setLocalPath("/jars"); System.out.println("Local Path:"+conn.getLocalPath()); conn.upload("jftp.jar"); conn.disconnect(); }
  • 34. Sftp2Connection Upload snippet
    • The code snippet will create a secure connection for the Sftp2Connection class.
    • Then the login( ) function will authenticate using the username and password.
    • The Local directory will be the root directory as well as the remote directory, so the local directory is changed to “C:jars”.
    • This directory contains “C:jarsjftp.jar” that is uploaded with the upload ( ) function.
    • If there is any error along the way, an exception will happen pointing at the stack where the error code appeared.
  • 35. Sftp2Connection Upload snippet
    • Running through JFtp manually, you can observe if the file is uploaded:
  • 36. Conclusion
  • 37. There are many Open Source Solutions
    • Users are no longer dependent on the survival of the software vendor.
    • Users can continue to develop and change the core of the acquired software.
    • Users can benefit from successful developments by others who have used or developed the software.
    • Open standards, such as XML are used for data exchange. The standards are open and not proprietary.