RE: SFTP Host key verification failed.

Find out where your admin loaded the host key. There is a file called "known_hosts" that hold the keys your client will trust.
Look at your user profile. What is the home directory?

Under the home directory there will be a hidden folder, .ssh which is the default location for the know_hosts file. I have put this directory and file into the root of the IFS and I override my SSH jobs to use this directory.

Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Versfelt, Charles
Sent: Friday, January 27, 2017 1:16 PM
To: midrange-l@xxxxxxxxxxxx
Subject: SFTP Host key verification failed.

I'm an RPG programmer, and I'm having a problem getting a program to run to SFTP a file to another system. I hope someone can help. This may have something to do with the rsh keys, our operations manager loads those and I'm not sure how to check them.

The logs didn't show me much (just "Connection Closed") but when I try to call qp2term run the sftp command I get the following in the log. Please let me know if there's any additional information I can provide.

Charlie

sftp -vvv -b /home/temporary/px200c4.txt EMARUSER@xxxxxxxxxxxxxxxxxxxxx


OpenSSH_6.9p1, OpenSSL 1.0.2h 3 May 2016
debug1: Reading configuration data /QOpenSys/QIBM/ProdData/SC1/OpenSSH/openss
h-4.7p1/etc/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to suitesftp.emarsys.net [185.4.123.100] port 22.
debug1: Connection established.
debug1: identity file /home/EMARUSER/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_dsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/EMARUSER/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.9
debug1: Remote protocol version 2.0, remote software version mod_sftp/0.9.7
debug1: no match: mod_sftp/0.9.7
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to suitesftp.emarsys.net:22 as 'EMARUSER'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: curve25519-sha256@xxxxxxxxxx,ecdh-sha2-nistp256,ec
dh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diff
ie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-gro
up1-sha1
debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@xxxxxxxxxxx,ecdsa-sha
2-nistp384-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp521-cert-v01@xxxxxxxxxxx,ssh-
ed25519-cert-v01@xxxxxxxxxxx,ssh-rsa-cert-v01@xxxxxxxxxxx,ssh-dss-cert-v01@op
enssh.com,ssh-rsa-cert-v00@xxxxxxxxxxx,ssh-dss-cert-v00@xxxxxxxxxxx,ecdsa-sha
2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa,ssh-ds
s
debug2: kex_parse_kexinit: chacha20-poly1305@xxxxxxxxxxx,aes128-ctr,aes192-ct
r,aes256-ctr,aes128-gcm@xxxxxxxxxxx,aes256-gcm@xxxxxxxxxxx,arcfour256,arcfour
128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfou
r,rijndael-cbc@xxxxxxxxxxxxxx
debug2: kex_parse_kexinit: chacha20-poly1305@xxxxxxxxxxx,aes128-ctr,aes192-ct
r,aes256-ctr,aes128-gcm@xxxxxxxxxxx,aes256-gcm@xxxxxxxxxxx,arcfour256,arcfour
128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfou
r,rijndael-cbc@xxxxxxxxxxxxxx
debug2: kex_parse_kexinit: umac-64-etm@xxxxxxxxxxx,umac-128-etm@xxxxxxxxxxx,h
mac-sha2-256-etm@xxxxxxxxxxx,hmac-sha2-512-etm@xxxxxxxxxxx,hmac-sha1-etm@open
ssh.com,umac-64@xxxxxxxxxxx,umac-128@xxxxxxxxxxx,hmac-sha2-256,hmac-sha2-512,
hmac-sha1,hmac-md5-etm@xxxxxxxxxxx,hmac-ripemd160-etm@xxxxxxxxxxx,hmac-sha1-9
6-etm@xxxxxxxxxxx,hmac-md5-96-etm@xxxxxxxxxxx,hmac-md5,hmac-ripemd160,hmac-ri
pemd160@xxxxxxxxxxx,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: umac-64-etm@xxxxxxxxxxx,umac-128-etm@xxxxxxxxxxx,h
mac-sha2-256-etm@xxxxxxxxxxx,hmac-sha2-512-etm@xxxxxxxxxxx,hmac-sha1-etm@open
ssh.com,umac-64@xxxxxxxxxxx,umac-128@xxxxxxxxxxx,hmac-sha2-256,hmac-sha2-512,
hmac-sha1,hmac-md5-etm@xxxxxxxxxxx,hmac-ripemd160-etm@xxxxxxxxxxx,hmac-sha1-9
6-etm@xxxxxxxxxxx,hmac-md5-96-etm@xxxxxxxxxxx,hmac-md5,hmac-ripemd160,hmac-ri
pemd160@xxxxxxxxxxx,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@xxxxxxxxxxx,zlib
debug2: kex_parse_kexinit: none,zlib@xxxxxxxxxxx,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellma
n-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,
rsa1024-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192
-cbc,aes128-cbc,blowfish-ctr,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,3
des-ctr,3des-cbc
debug2: kex_parse_kexinit: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192
-cbc,aes128-cbc,blowfish-ctr,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,3
des-ctr,3des-cbc
debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-r
ipemd160
debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-r
ipemd160
debug2: kex_parse_kexinit: zlib@xxxxxxxxxxx,zlib,none
debug2: kex_parse_kexinit: zlib@xxxxxxxxxxx,zlib,none
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug1: kex: server->client aes128-ctr hmac-sha1 none
debug1: kex: client->server aes128-ctr hmac-sha1 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<7680<8192) sent
debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
debug2: bits set: 3854/7680
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: ssh-rsa SHA256:Q74xuXl9kDX4Vm3Ocg0LSqouE4EpME586V87O
q5UXgI
Host key verification failed.
Connection closed