Bug#993606: RFP: libnet-sftp-perl -- pure-Perl implementation of the Secure File Transfer Protocol (SFTP)

[Florian Schlichting]

> Net::SFTP is a pure-Perl implementation of the Secure File Transfer
> Protocol (SFTP) - file transfer built on top of the SSH2 protocol.
> Net::SFTP uses Net::SSH::Perl to build a secure, encrypted tunnel
> through which files can be transferred and managed. It provides a subset
> of the commands listed in the SSH File Transfer Protocol IETF draft,
> which can be found at
> http://www.openssh.com/txt/draft-ietf-secsh-filexfer-00.txt.

with regard to Jonas' question, the POD says unter "COMMAND METHODS":

Net::SFTP supports all of the commands listed in the SFTP version 3
protocol specification. Each command is available for execution as a
separate method, with a few exceptions: SSH_FXP_INIT,
SSH_FXP_VERSION, and SSH_FXP_READDIR.


Jonathan, have you looked at Net::SFTP::Foreign, which is already
packaged in Debian, and can you comment why that's not an option for
you? It has a compatibility module for Net::SFTP and it leaves all the
cryptographic and more generally security related tasks to the system's
ssh command. There's a discussion of Net::SFTP::Foreign Vs. Net::SFTP
Vs. Net::SSH2::SFTP in the POD.

Florian

Bug#993606: RFP: libnet-sftp-perl -- pure-Perl implementation of the Secure File Transfer Protocol (SFTP)

[Jonas Smedegaard]

Quoting Jonathan Wiltshire (2021-09-03 17:35:24)
> Package: wnpp
> Severity: wishlist
> X-Debbugs-CC: debian-p...@lists.debian.org
> 
> * Package name: libnet-sftp-perl
>Version : 0.12
>Upstream Author : David Robins 
> * URL : https://metacpan.org/pod/Net::SFTP
> * License : Perl
>Programming Lang: Perl
>Description : pure-Perl implementation of the Secure File 
> Transfer Protocol (SFTP)
> 
> Upstream description:
> 
> Net::SFTP is a pure-Perl implementation of the Secure File Transfer
> Protocol (SFTP) - file transfer built on top of the SSH2 protocol.
> Net::SFTP uses Net::SSH::Perl to build a secure, encrypted tunnel
> through which files can be transferred and managed. It provides a subset
> of the commands listed in the SSH File Transfer Protocol IETF draft,
> which can be found at
> http://www.openssh.com/txt/draft-ietf-secsh-filexfer-00.txt.
> 
> SFTP stands for Secure File Transfer Protocol and is a method of
> transferring files between machines over a secure, encrypted connection
> (as opposed to regular FTP, which functions over an insecure
> connection). The security in SFTP comes through its integration with
> SSH, which provides an encrypted transport layer over which the SFTP
> commands are executed, and over which files can be transferred. The SFTP
> protocol defines a client and a server; only the client, not the server,
> is implemented in Net::SFTP.
> 
> Because it is built upon SSH, SFTP inherits all of the built-in
> functionality provided by Net::SSH::Perl: encrypted communications
> between client and server, multiple supported authentication methods
> (eg. password, public key, etc.).

Debian has multiple sftp implementations, an one of the differences is 
which versions of the protocol is supported (relevant e.g. for 
file-locking supported only in recent versions).

Please therefore mention in long description of the package which sftp 
protocol versions are supported.  This might be helpful:



 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

signature.asc
Description: signature

Bug#993606: RFP: libnet-sftp-perl -- pure-Perl implementation of the Secure File Transfer Protocol (SFTP)

[Jonathan Wiltshire]

Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-p...@lists.debian.org

* Package name: libnet-sftp-perl
  Version : 0.12
  Upstream Author : David Robins 
* URL : https://metacpan.org/pod/Net::SFTP
* License : Perl
  Programming Lang: Perl
  Description : pure-Perl implementation of the Secure File 
Transfer Protocol (SFTP)


Upstream description:

Net::SFTP is a pure-Perl implementation of the Secure File Transfer
Protocol (SFTP) - file transfer built on top of the SSH2 protocol.
Net::SFTP uses Net::SSH::Perl to build a secure, encrypted tunnel
through which files can be transferred and managed. It provides a subset
of the commands listed in the SSH File Transfer Protocol IETF draft,
which can be found at
http://www.openssh.com/txt/draft-ietf-secsh-filexfer-00.txt.

SFTP stands for Secure File Transfer Protocol and is a method of
transferring files between machines over a secure, encrypted connection
(as opposed to regular FTP, which functions over an insecure
connection). The security in SFTP comes through its integration with
SSH, which provides an encrypted transport layer over which the SFTP
commands are executed, and over which files can be transferred. The SFTP
protocol defines a client and a server; only the client, not the server,
is implemented in Net::SFTP.

Because it is built upon SSH, SFTP inherits all of the built-in
functionality provided by Net::SSH::Perl: encrypted communications
between client and server, multiple supported authentication methods
(eg. password, public key, etc.).