Re: Is ssh appropriate for this use case?

[Andreas Schneider <asn@xxxxxxxxxxxxxx>]

On Friday, 10 April 2020 02:07:59 CEST Christopher Morley wrote:
> Hi all -
> I hope this is an appropriate question for this forum.
> 
> I have an application that consists of a user interface component (written
> in java) and a simulation engine (written in c++). These run in separate
> processes, potentially on different machines. The java process can start
> one or more simulation processes, disconnect, and re-connect to them. The
> simulation process can accept multiple user interface connections.
> Currently the processes communicate via tcp sockets, with the c++ process
> implementing a fairly standard non-blocking select-based event loop for
> processing requests from the connected java process(es).
> 
> I would like to add user authentication (for connection requests to the c++
> simulation component) and encryption of the socket communications. I have
> been working on a small prototype based on the sshd_direct-tcpip.c example
> from libssh and the jsch example app UserAuthPubKey.java using public key
> (RSA) authentication.
> 
> OK, my specific questions:
> 1. Is ssh in general and libssh (and jsch?) appropriate choices to solve
> this problem?

Yes it is.

> 2. Is the direct-tcpip channel the right one to use? Is there a more
> appropriate example that I can use, such as an "echo" server?

For the server side ssh_server_fork.c just don't open a shell but see channel 
and read/write to it.



	Andreas