SSHDaemon Component
Properties Methods Events Configuration Settings Errors
The SSHDaemon component is used to create Secure Shell (SSH) servers. The component handles multiple simultaneous connections on the same TCP/IP port (service port). It is designed to balance the load between connections for a fast, powerful server.
Syntax
TiphSSHDaemon
Remarks
The SSHDaemon component is the SSH-enabled equivalent of the IP*Works! IPDaemon component, extended by a set of new properties and events that deal with SSH security. The SSHCompressionAlgorithms and SSHEncryptionAlgorithms properties determine which protocols are enabled for the SSH handshake. The SSHCert* properties are used to select a certificate for the server (please note that a valid certificate MUST be selected before the server can function). The SSHUserAuthRequest event will allow you to use authenticate clients using digital certificates or passwords. Finally, the SSHStatus event provides information about the SSH handshake and underlying protocol notifications.
By default, each instance of SSHDaemon can handle up to 1000 simultaneous incoming connections (this number may be increased up to 100,000, or decreased to a lower value by using the MaxConnections configuration setting).
SSH connections are identified by a ConnectionId. Events relating to these connections as a whole will use the ConnectionId to identify the specific connection. Connections may also contained one or more multiplexed channels, which are identified by a ChannelId. Channel-level events will specify the ChannelId to which they relate.
SSHDaemon can start to listen on a port by setting the Listening property to True. When a remote host asks for a connection, the ConnectionRequest event is fired. At that point, the connection can either be accepted or rejected. If the connection is accepted, a ConnectionId is assigned, and communication can start. From this point on, the operation is very similar to SSHClient. Data can be sent to an individual SSHChannel using SendChannelData. The address and port of the incoming connection can be found by querying the ClientRemoteHost and ClientRemotePort properties.
Property List
The following is the full list of the properties of the component with short descriptions. Click on the links for further details.
| SSHChannelCount | The number of records in the arrays. |
| BytesSent | The number of bytes actually sent after a sending channel data. |
| ChannelId | An id generated by the component to identify the current SSH channel. |
| DataToSend | A string of data to be sent to the remote host. |
| ConnectionBacklog | The maximum number of pending connections maintained by the TCP/IP subsystem. |
| SSHConnectionCount | The number of records in the SSHConnection arrays. |
| SSHConnectionConnected | Used to disconnect individual connections and/or show their status. |
| SSHConnectionLocalAddress | This property shows the IP address of the interface through which the connection is passing. |
| SSHConnectionRemoteHost | The RemoteHost shows the IP address of the remote host through which the connection is coming. |
| SSHConnectionRemotePort | The RemotePort shows the TCP port on the remote host through which the connection is coming. |
| SSHConnectionTimeout | A timeout for the component. |
| DefaultAuthMethods | Specifies the supported authentication methods. |
| DefaultTimeout | An initial timeout value to be used by incoming connections. |
| KeyboardInteractiveMessage | The instructions to send to the client during keyboard-interactive authentication. |
| KeyboardInteractivePromptCount | The number of records in the KeyboardInteractivePrompt arrays. |
| KeyboardInteractivePromptEcho | Specifies if the client should echo the value entered by the user or not. |
| KeyboardInteractivePromptPrompt | The prompt label/text the client should present to the user. |
| Listening | If True, the component accepts incoming connections on LocalPort. |
| LocalHost | The name of the local host or user-assigned IP interface through which connections are initiated or accepted. |
| LocalPort | The TCP port in the local host where the component listens. |
| SSHCertEncoded | The certificate (PEM/base64 encoded). |
| SSHCertStore | The name of the certificate store for the client certificate. |
| SSHCertStorePassword | If the certificate store is of a type that requires a password, this property is used to specify that password in order to open the certificate store. |
| SSHCertStoreType | The type of certificate store for this certificate. |
| SSHCertSubject | The subject of the certificate used for client authentication. |
| SSHCompressionAlgorithms | A comma-separated list containing all allowable compression algorithms. |
| SSHEncryptionAlgorithms | A comma-separated list containing all allowable compression algorithms. |
Method List
The following is the full list of the methods of the component with short descriptions. Click on the links for further details.
| CloseChannel | Closes a existing SSHChannel . |
| Config | Sets or retrieves a configuration setting . |
| Disconnect | Disconnect the specified client. |
| DoEvents | Processes events from the internal message queue. |
| ExchangeKeys | Causes the component to exchange a new set of session keys on the specified connection. |
| GetSSHParam | Used to read a field from an SSH packet's payload. |
| GetSSHParamBytes | Used to read a field from an SSH packet's payload. |
| OpenChannel | Opens a new SSHChannel . |
| SendChannelData | Used to send regular data over an SSH channel. |
| SendSSHPacket | Used to send an encoded SSH packet to a connected client. |
| SetSSHParam | Used to write a field to the end of a payload. |
| Shutdown | Shuts down the server. |
Event List
The following is the full list of the events fired by the component with short descriptions. Click on the links for further details.
| Connected | Fired immediately after a connection completes (or fails). |
| ConnectionRequest | Fired when a request for connection comes from a remote host. |
| Disconnected | Fired when a connection is closed. |
| Error | Information about errors during data delivery. |
| SSHChannelClosed | Fired when a channel is closed. |
| SSHChannelDataIn | Fired when data is received on an SSH channel. |
| SSHChannelEOF | Fired when the remote peer signals the end of the data stream for the channel. |
| SSHChannelOpened | Fired when a channel is successfully opened. |
| SSHChannelOpenRequest | Fired when a client attempts to open a new channel. |
| SSHChannelReadyToSend | Fired when the component is ready to send data. |
| SSHChannelRequest | Fired when the SSHHost sends a channel request to the client. |
| SSHChannelRequested | Fired if the SSHChannelRequest was successful, any further processing for the channel request should be done here. |
| SSHServiceRequest | Fired when a client requests a service to be started. |
| SSHStatus | Shows the progress of the secure connection. |
| SSHUserAuthRequest | Fires when a client attempts to authenticate a connection. |
Configuration Settings
The following is a list of configuration settings for the component with short descriptions. Click on the links for further details.
| MaxAuthAttempts | The maximum authentication attempts allowed before forcing a disconnect. |
| ServerSSHVersionString | The SSH version string sent to connecting clients. |
| UserAuthBanner[ConnectionId] | A custom user authentication banner. |
| KeyRenegotiationThreshold | Sets the threshold for the SSH Key Renegotiation. |
| SSHKeyExchangeAlgorithms | Specifies the supported key exchange algorithms. |
| SSHMacAlgorithms | Specifies the supported Mac algorithms. |
| BindExclusively | Whether or not the component considers a local port reserved for exclusive use. |
| InBufferSize | The size in bytes of the incoming queue of the socket. |
| MaxConnections | The maximum number of connections available. |
| OutBufferSize | The size in bytes of the outgoing queue of the socket. |
| KeepAliveTime | The inactivity time in milliseconds before a TCP keep-alive packet is sent. |
| KeepAliveInterval | The retry interval, in milliseconds, to be used when a TCP keep-alive packet is sent and no response is received. |
| RecordLength[ConnectionId] | The length of received data records. |
| TcpNoDelay | Whether or not to delay when sending packets. |
| CodePage | The system code page used for Unicode to Multibyte translations. |