head 1.18; access; symbols pkgsrc-2026Q2:1.17.0.10 pkgsrc-2026Q2-base:1.17 pkgsrc-2026Q1:1.17.0.8 pkgsrc-2026Q1-base:1.17 pkgsrc-2025Q4:1.17.0.6 pkgsrc-2025Q4-base:1.17 pkgsrc-2025Q3:1.17.0.4 pkgsrc-2025Q3-base:1.17 pkgsrc-2025Q2:1.17.0.2 pkgsrc-2025Q2-base:1.17 pkgsrc-2025Q1:1.16.0.4 pkgsrc-2025Q1-base:1.16 pkgsrc-2024Q4:1.16.0.2 pkgsrc-2024Q4-base:1.16 pkgsrc-2024Q3:1.15.0.2 pkgsrc-2024Q3-base:1.15 pkgsrc-2024Q2:1.14.0.6 pkgsrc-2024Q2-base:1.14 pkgsrc-2024Q1:1.14.0.4 pkgsrc-2024Q1-base:1.14 pkgsrc-2023Q4:1.14.0.2 pkgsrc-2023Q4-base:1.14 pkgsrc-2023Q3:1.13.0.10 pkgsrc-2023Q3-base:1.13 pkgsrc-2023Q2:1.13.0.8 pkgsrc-2023Q2-base:1.13 pkgsrc-2023Q1:1.13.0.6 pkgsrc-2023Q1-base:1.13 pkgsrc-2022Q4:1.13.0.4 pkgsrc-2022Q4-base:1.13 pkgsrc-2022Q3:1.13.0.2 pkgsrc-2022Q3-base:1.13 pkgsrc-2022Q2:1.11.0.4 pkgsrc-2022Q2-base:1.11 pkgsrc-2022Q1:1.11.0.2 pkgsrc-2022Q1-base:1.11 pkgsrc-2021Q4:1.10.0.12 pkgsrc-2021Q4-base:1.10 pkgsrc-2021Q3:1.10.0.10 pkgsrc-2021Q3-base:1.10 pkgsrc-2021Q2:1.10.0.8 pkgsrc-2021Q2-base:1.10 pkgsrc-2021Q1:1.10.0.6 pkgsrc-2021Q1-base:1.10 pkgsrc-2020Q4:1.10.0.4 pkgsrc-2020Q4-base:1.10 pkgsrc-2020Q3:1.10.0.2 pkgsrc-2020Q3-base:1.10 pkgsrc-2020Q2:1.8.0.4 pkgsrc-2020Q2-base:1.8 pkgsrc-2020Q1:1.8.0.2 pkgsrc-2020Q1-base:1.8 pkgsrc-2019Q4:1.7.0.6 pkgsrc-2019Q4-base:1.7 pkgsrc-2019Q3:1.7.0.2 pkgsrc-2019Q3-base:1.7 pkgsrc-2019Q2:1.6.0.4 pkgsrc-2019Q2-base:1.6 pkgsrc-2019Q1:1.6.0.2 pkgsrc-2019Q1-base:1.6 pkgsrc-2018Q4:1.5.0.4 pkgsrc-2018Q4-base:1.5 pkgsrc-2018Q3:1.5.0.2 pkgsrc-2018Q3-base:1.5 pkgsrc-2018Q2:1.4.0.2 pkgsrc-2018Q2-base:1.4 pkgsrc-2018Q1:1.2.0.4 pkgsrc-2018Q1-base:1.2 pkgsrc-2017Q4:1.2.0.2 pkgsrc-2017Q4-base:1.2; locks; strict; comment @# @; 1.18 date 2026.07.01.13.06.33; author adam; state Exp; branches; next 1.17; commitid ktY1uF2v8ayK3XLG; 1.17 date 2025.04.14.05.08.07; author adam; state Exp; branches; next 1.16; commitid M6Um6i7tEx84FYQF; 1.16 date 2024.11.13.10.31.54; author adam; state Exp; branches; next 1.15; commitid lmpPpma1fxb0ltxF; 1.15 date 2024.07.04.10.06.35; author adam; state Exp; branches; next 1.14; commitid XLhRRks0ylxnrvgF; 1.14 date 2023.12.18.15.52.05; author wiz; state Exp; branches; next 1.13; commitid 54qzYfnKZlevKXQE; 1.13 date 2022.08.18.16.45.30; author adam; state Exp; branches; next 1.12; commitid zJnA40sJlt9lHnQD; 1.12 date 2022.07.08.08.00.42; author adam; state Exp; branches; next 1.11; commitid 95kuWVNQS1eZ64LD; 1.11 date 2022.01.24.12.50.27; author adam; state Exp; branches; next 1.10; commitid blBnu5kLvaWe1TpD; 1.10 date 2020.09.14.07.40.08; author adam; state Exp; branches; next 1.9; commitid WP8pvow8Ge74hZnC; 1.9 date 2020.07.27.17.32.51; author adam; state Exp; branches; next 1.8; commitid 60dye4MOyvJf8KhC; 1.8 date 2020.03.12.16.36.31; author adam; state Exp; branches; next 1.7; commitid bHDzFlEgTtCWd80C; 1.7 date 2019.08.25.12.24.06; author adam; state Exp; branches; next 1.6; commitid 26BddNAaElhVfpAB; 1.6 date 2019.03.03.12.32.12; author adam; state Exp; branches; next 1.5; commitid 9iY3INbwePPqVUdB; 1.5 date 2018.07.04.03.38.34; author adam; state Exp; branches; next 1.4; commitid q4iL1wiDNvADKLIA; 1.4 date 2018.06.19.11.37.28; author adam; state Exp; branches; next 1.3; commitid vkvYIigRtOQSSSGA; 1.3 date 2018.05.29.07.18.57; author adam; state Exp; branches; next 1.2; commitid RVJYXb5bbsDZ7aEA; 1.2 date 2017.11.17.09.07.02; author adam; state Exp; branches; next 1.1; commitid TRiD8vgPRdwJVmfA; 1.1 date 2017.10.30.18.21.20; author adam; state Exp; branches; next ; commitid pEZ7RcXfqoRNz6dA; desc @@ 1.18 log @py-asyncssh: updated to 2.24.0 2.24.0 (27 Jun 2026) * Added support for creating and validating SSHSIG signatures, as well as OpenSSH "allowed signers" files. * Added support for ML-KEM key exchange from the PyCA cryptography package when it is available. This avoids the need to have the liboqs library installed to use ML-KEM. However, liboqs is still required to support SNTRUP kex exchange. * Fixed an issue with handling of SSH maximum packet size when opening a new SSH channel, aborting with a protocol error if a peer attempts to set this size to 0. Thanks go to GitHub user afldl for reporting this issue and providing analysis and reproduction code. * Fixed an issue with include directives in OpenSSH config files. Thanks go to GitHub users sethholmes and tazle for reporting this issue and providing analysis and a proposed fix. @ text @@@comment $NetBSD: PLIST,v 1.17 2025/04/14 05:08:07 adam Exp $ ${PYSITELIB}/${WHEEL_INFODIR}/METADATA ${PYSITELIB}/${WHEEL_INFODIR}/RECORD ${PYSITELIB}/${WHEEL_INFODIR}/WHEEL ${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE ${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt ${PYSITELIB}/asyncssh/__init__.py ${PYSITELIB}/asyncssh/__init__.pyc ${PYSITELIB}/asyncssh/__init__.pyo ${PYSITELIB}/asyncssh/agent.py ${PYSITELIB}/asyncssh/agent.pyc ${PYSITELIB}/asyncssh/agent.pyo ${PYSITELIB}/asyncssh/agent_unix.py ${PYSITELIB}/asyncssh/agent_unix.pyc ${PYSITELIB}/asyncssh/agent_unix.pyo ${PYSITELIB}/asyncssh/agent_win32.py ${PYSITELIB}/asyncssh/agent_win32.pyc ${PYSITELIB}/asyncssh/agent_win32.pyo ${PYSITELIB}/asyncssh/asn1.py ${PYSITELIB}/asyncssh/asn1.pyc ${PYSITELIB}/asyncssh/asn1.pyo ${PYSITELIB}/asyncssh/auth.py ${PYSITELIB}/asyncssh/auth.pyc ${PYSITELIB}/asyncssh/auth.pyo ${PYSITELIB}/asyncssh/auth_keys.py ${PYSITELIB}/asyncssh/auth_keys.pyc ${PYSITELIB}/asyncssh/auth_keys.pyo ${PYSITELIB}/asyncssh/channel.py ${PYSITELIB}/asyncssh/channel.pyc ${PYSITELIB}/asyncssh/channel.pyo ${PYSITELIB}/asyncssh/client.py ${PYSITELIB}/asyncssh/client.pyc ${PYSITELIB}/asyncssh/client.pyo ${PYSITELIB}/asyncssh/compression.py ${PYSITELIB}/asyncssh/compression.pyc ${PYSITELIB}/asyncssh/compression.pyo ${PYSITELIB}/asyncssh/config.py ${PYSITELIB}/asyncssh/config.pyc ${PYSITELIB}/asyncssh/config.pyo ${PYSITELIB}/asyncssh/connection.py ${PYSITELIB}/asyncssh/connection.pyc ${PYSITELIB}/asyncssh/connection.pyo ${PYSITELIB}/asyncssh/constants.py ${PYSITELIB}/asyncssh/constants.pyc ${PYSITELIB}/asyncssh/constants.pyo ${PYSITELIB}/asyncssh/crypto/__init__.py ${PYSITELIB}/asyncssh/crypto/__init__.pyc ${PYSITELIB}/asyncssh/crypto/__init__.pyo ${PYSITELIB}/asyncssh/crypto/chacha.py ${PYSITELIB}/asyncssh/crypto/chacha.pyc ${PYSITELIB}/asyncssh/crypto/chacha.pyo ${PYSITELIB}/asyncssh/crypto/cipher.py ${PYSITELIB}/asyncssh/crypto/cipher.pyc ${PYSITELIB}/asyncssh/crypto/cipher.pyo ${PYSITELIB}/asyncssh/crypto/dh.py ${PYSITELIB}/asyncssh/crypto/dh.pyc ${PYSITELIB}/asyncssh/crypto/dh.pyo ${PYSITELIB}/asyncssh/crypto/dsa.py ${PYSITELIB}/asyncssh/crypto/dsa.pyc ${PYSITELIB}/asyncssh/crypto/dsa.pyo ${PYSITELIB}/asyncssh/crypto/ec.py ${PYSITELIB}/asyncssh/crypto/ec.pyc ${PYSITELIB}/asyncssh/crypto/ec.pyo ${PYSITELIB}/asyncssh/crypto/ec_params.py ${PYSITELIB}/asyncssh/crypto/ec_params.pyc ${PYSITELIB}/asyncssh/crypto/ec_params.pyo ${PYSITELIB}/asyncssh/crypto/ed.py ${PYSITELIB}/asyncssh/crypto/ed.pyc ${PYSITELIB}/asyncssh/crypto/ed.pyo ${PYSITELIB}/asyncssh/crypto/kdf.py ${PYSITELIB}/asyncssh/crypto/kdf.pyc ${PYSITELIB}/asyncssh/crypto/kdf.pyo ${PYSITELIB}/asyncssh/crypto/misc.py ${PYSITELIB}/asyncssh/crypto/misc.pyc ${PYSITELIB}/asyncssh/crypto/misc.pyo ${PYSITELIB}/asyncssh/crypto/pq.py ${PYSITELIB}/asyncssh/crypto/pq.pyc ${PYSITELIB}/asyncssh/crypto/pq.pyo ${PYSITELIB}/asyncssh/crypto/rsa.py ${PYSITELIB}/asyncssh/crypto/rsa.pyc ${PYSITELIB}/asyncssh/crypto/rsa.pyo ${PYSITELIB}/asyncssh/crypto/umac.py ${PYSITELIB}/asyncssh/crypto/umac.pyc ${PYSITELIB}/asyncssh/crypto/umac.pyo ${PYSITELIB}/asyncssh/crypto/x509.py ${PYSITELIB}/asyncssh/crypto/x509.pyc ${PYSITELIB}/asyncssh/crypto/x509.pyo ${PYSITELIB}/asyncssh/dsa.py ${PYSITELIB}/asyncssh/dsa.pyc ${PYSITELIB}/asyncssh/dsa.pyo ${PYSITELIB}/asyncssh/ecdsa.py ${PYSITELIB}/asyncssh/ecdsa.pyc ${PYSITELIB}/asyncssh/ecdsa.pyo ${PYSITELIB}/asyncssh/eddsa.py ${PYSITELIB}/asyncssh/eddsa.pyc ${PYSITELIB}/asyncssh/eddsa.pyo ${PYSITELIB}/asyncssh/editor.py ${PYSITELIB}/asyncssh/editor.pyc ${PYSITELIB}/asyncssh/editor.pyo ${PYSITELIB}/asyncssh/encryption.py ${PYSITELIB}/asyncssh/encryption.pyc ${PYSITELIB}/asyncssh/encryption.pyo ${PYSITELIB}/asyncssh/forward.py ${PYSITELIB}/asyncssh/forward.pyc ${PYSITELIB}/asyncssh/forward.pyo ${PYSITELIB}/asyncssh/gss.py ${PYSITELIB}/asyncssh/gss.pyc ${PYSITELIB}/asyncssh/gss.pyo ${PYSITELIB}/asyncssh/gss_unix.py ${PYSITELIB}/asyncssh/gss_unix.pyc ${PYSITELIB}/asyncssh/gss_unix.pyo ${PYSITELIB}/asyncssh/gss_win32.py ${PYSITELIB}/asyncssh/gss_win32.pyc ${PYSITELIB}/asyncssh/gss_win32.pyo ${PYSITELIB}/asyncssh/kex.py ${PYSITELIB}/asyncssh/kex.pyc ${PYSITELIB}/asyncssh/kex.pyo ${PYSITELIB}/asyncssh/kex_dh.py ${PYSITELIB}/asyncssh/kex_dh.pyc ${PYSITELIB}/asyncssh/kex_dh.pyo ${PYSITELIB}/asyncssh/kex_rsa.py ${PYSITELIB}/asyncssh/kex_rsa.pyc ${PYSITELIB}/asyncssh/kex_rsa.pyo ${PYSITELIB}/asyncssh/keysign.py ${PYSITELIB}/asyncssh/keysign.pyc ${PYSITELIB}/asyncssh/keysign.pyo ${PYSITELIB}/asyncssh/known_hosts.py ${PYSITELIB}/asyncssh/known_hosts.pyc ${PYSITELIB}/asyncssh/known_hosts.pyo ${PYSITELIB}/asyncssh/listener.py ${PYSITELIB}/asyncssh/listener.pyc ${PYSITELIB}/asyncssh/listener.pyo ${PYSITELIB}/asyncssh/logging.py ${PYSITELIB}/asyncssh/logging.pyc ${PYSITELIB}/asyncssh/logging.pyo ${PYSITELIB}/asyncssh/mac.py ${PYSITELIB}/asyncssh/mac.pyc ${PYSITELIB}/asyncssh/mac.pyo ${PYSITELIB}/asyncssh/misc.py ${PYSITELIB}/asyncssh/misc.pyc ${PYSITELIB}/asyncssh/misc.pyo ${PYSITELIB}/asyncssh/packet.py ${PYSITELIB}/asyncssh/packet.pyc ${PYSITELIB}/asyncssh/packet.pyo ${PYSITELIB}/asyncssh/pattern.py ${PYSITELIB}/asyncssh/pattern.pyc ${PYSITELIB}/asyncssh/pattern.pyo ${PYSITELIB}/asyncssh/pbe.py ${PYSITELIB}/asyncssh/pbe.pyc ${PYSITELIB}/asyncssh/pbe.pyo ${PYSITELIB}/asyncssh/pkcs11.py ${PYSITELIB}/asyncssh/pkcs11.pyc ${PYSITELIB}/asyncssh/pkcs11.pyo ${PYSITELIB}/asyncssh/process.py ${PYSITELIB}/asyncssh/process.pyc ${PYSITELIB}/asyncssh/process.pyo ${PYSITELIB}/asyncssh/public_key.py ${PYSITELIB}/asyncssh/public_key.pyc ${PYSITELIB}/asyncssh/public_key.pyo ${PYSITELIB}/asyncssh/py.typed ${PYSITELIB}/asyncssh/rsa.py ${PYSITELIB}/asyncssh/rsa.pyc ${PYSITELIB}/asyncssh/rsa.pyo ${PYSITELIB}/asyncssh/saslprep.py ${PYSITELIB}/asyncssh/saslprep.pyc ${PYSITELIB}/asyncssh/saslprep.pyo ${PYSITELIB}/asyncssh/scp.py ${PYSITELIB}/asyncssh/scp.pyc ${PYSITELIB}/asyncssh/scp.pyo ${PYSITELIB}/asyncssh/server.py ${PYSITELIB}/asyncssh/server.pyc ${PYSITELIB}/asyncssh/server.pyo ${PYSITELIB}/asyncssh/session.py ${PYSITELIB}/asyncssh/session.pyc ${PYSITELIB}/asyncssh/session.pyo ${PYSITELIB}/asyncssh/sftp.py ${PYSITELIB}/asyncssh/sftp.pyc ${PYSITELIB}/asyncssh/sftp.pyo ${PYSITELIB}/asyncssh/sk.py ${PYSITELIB}/asyncssh/sk.pyc ${PYSITELIB}/asyncssh/sk.pyo ${PYSITELIB}/asyncssh/sk_ecdsa.py ${PYSITELIB}/asyncssh/sk_ecdsa.pyc ${PYSITELIB}/asyncssh/sk_ecdsa.pyo ${PYSITELIB}/asyncssh/sk_eddsa.py ${PYSITELIB}/asyncssh/sk_eddsa.pyc ${PYSITELIB}/asyncssh/sk_eddsa.pyo ${PYSITELIB}/asyncssh/socks.py ${PYSITELIB}/asyncssh/socks.pyc ${PYSITELIB}/asyncssh/socks.pyo ${PYSITELIB}/asyncssh/sshsig.py ${PYSITELIB}/asyncssh/sshsig.pyc ${PYSITELIB}/asyncssh/sshsig.pyo ${PYSITELIB}/asyncssh/stream.py ${PYSITELIB}/asyncssh/stream.pyc ${PYSITELIB}/asyncssh/stream.pyo ${PYSITELIB}/asyncssh/subprocess.py ${PYSITELIB}/asyncssh/subprocess.pyc ${PYSITELIB}/asyncssh/subprocess.pyo ${PYSITELIB}/asyncssh/tuntap.py ${PYSITELIB}/asyncssh/tuntap.pyc ${PYSITELIB}/asyncssh/tuntap.pyo ${PYSITELIB}/asyncssh/version.py ${PYSITELIB}/asyncssh/version.pyc ${PYSITELIB}/asyncssh/version.pyo ${PYSITELIB}/asyncssh/x11.py ${PYSITELIB}/asyncssh/x11.pyc ${PYSITELIB}/asyncssh/x11.pyo @ 1.17 log @Fix PLIST after py-setuptools update; bump depends and revision @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.16 2024/11/13 10:31:54 adam Exp $ d191 3 @ 1.16 log @py-asyncssh: updated to 2.18.0 Release 2.18.0 (26 Oct 2024) ---------------------------- * Added support for post-quantum ML-KEM key exchange algorithms, interoperable with OpenSSH 9.9. * Added support for the OpenSSH "limits" extension, allowing the client to query server limits such as the maximum supported read and write sizes. The client will automatically default to the reported maximum size on servers that support this extension. * Added more ways to specify environment variables via the `env` option. Sequences of either 'key=value' strings or (key, value) tuples are now supported, in addition to a dict. * Added support for getting/setting environment variables as byte strings on platforms which support it. Previously, only Unicode strings were accepted and they were always encoded on the wire using UTF-8. * Added support for non-TCP sockets (such as a socketpair) as the `sock` parameter in connect calls. Thanks go to Christian Wendt for reporting this problem and proposing a fix. * Changed compression to be disabled by default to avoid it becoming a performance bottleneck on high-bandwidth connections. This now also matches the OpenSSH default. * Improved speed of parallelized SFTP reads when read-ahead goes beyond the end of the file. Thanks go to Maximilian Knespel for reporting this issue and providing performance measurements on the code before and after the change. * Improved cancellation handling during SCP transfers. * Improved support for selecting the currently available security key when the application lists multiple keys to try. Thanks go to GitHub user zanda8893 for reporting the issue and helping to work out the details of the problem. * Improved handling of reverse DNS failures in host-based authentication. Thanks go to GitHub user xBiggs for suggesting this change. * Improved debug logging of byte strings with non-printable characters. * Switched to using an executor on GSSAPI calls to avoid blocking the event loop. * Fixed handling of "UserKnownHostsFile none" in config files. This previously caused it to use the default known hosts, rather than disabling known host checking. * Fixed a runtime warning about not awaiting a coroutine in unit tests. * Fixed a unit test failure on Windows when calling abort on a transport. * Fixed a problem where a "MAC verification failed" error was sometimes sent on connection close. * Fixed SSHClientProcess code to not raise a runtime exception when waiting more than once for a process to finish. Thanks go to GitHub user starflows for reporting this issue. * Handled an error when attempting to import older verions of pyOpenSSL. Thanks go to Maximilian Knespel for reporting this issue and testing the fix. * Updated simple_server example code to switch from crypt to bcrypt, since crypt has been removed in Python 3.13. Thanks go to Colin Watson for providing this update. @ text @d1 1 a1 2 @@comment $NetBSD: PLIST,v 1.15 2024/07/04 10:06:35 adam Exp $ ${PYSITELIB}/${WHEEL_INFODIR}/LICENSE d5 1 @ 1.15 log @py-asyncssh: updated to 2.15.0 Release 2.15.0 (3 Jul 2024) --------------------------- * Added experimental support for tunneling of TUN/TAP network interfaces on Linux and macOS, allowing for either automatic packet forwarding or explicit reading and writing of packets sent through the tunnel by the application. Both callback and stream APIs are available. * Added support for forwarding terminal size and terminal size changes when stdin on an SSHServerProcess is redirected to a local TTY. * Added support for multiple tunnel/ProxyJump hosts. Thanks go to Adam Martin for suggesting this enhancement and proposing a solution. * Added support for OpenSSH lsetstat SFTP extension to set attributes on symbolic links on platforms which support that and use it to improve symlink handling in the SFTP get, put, and copy methods. In addition, a follow_symlinks option has been added on various SFTPClient methods which get and set these attributes. Thanks go to GitHub user eyalgolan1337 for reporting this issue. * Added support for password and passphrase arguments to be a callable or awaitable, called when performing authentication or loading encrypted private keys. Thanks go to GitHub user goblin for suggesting this enhancement. * Added support for proper flow control when using AsyncFileWriter or StreamWriter classes to do SSH process redirection. Thanks go to Benjy Wiener for reporting this issue and providing feedback on the fix. * Added is_closed() method SSHClientConnection/SSHServerConnection to return whether the associated network connection is closed or not. * Added support for setting and matching tags in OpenSSH config files. * Added an example of using "await" in addition to "async with" when opening a new SSHClientConnection. Thanks go to Michael Davis for suggesting this added documentation. * Improved handling CancelledError in SCP, avoiding an issue where AsyncSSH could sometimes get stuck waiting for the channel to close. Thanks go to Max Orlov for reporting the problem and providing code to reproduce it. * Fixed a regression from 2.14.1 related to rekeying an SSH connection when there's acitivty on the connection in the middle of rekeying. Thanks go to GitHub user eyalgolan1337 for helping to narrow down this problem and test the fix. * Fixed a problem with process redirection when a close is received without a preceding EOF. Thanks go to GitHub user xuoguoto who helped to provide sample scripts and ran tests to help track this down. * Fixed the processing of paths in SFTP client symlink requests. Thanks go to André Glüpker for reporting the problem and providing test code to demonstrate it. * Fixed an OpenSSH config file parsing issue. Thanks go to Siddh Raman Pant for reporting this issue. * Worked around a bug in a user auth banner generated by the cryptlib library. Thanks go to GitHub user mmayomoar for reporting this issue and suggesting a fix. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.14 2023/12/18 15:52:05 wiz Exp $ d76 3 a81 3 ${PYSITELIB}/asyncssh/crypto/sntrup.py ${PYSITELIB}/asyncssh/crypto/sntrup.pyc ${PYSITELIB}/asyncssh/crypto/sntrup.pyo @ 1.14 log @py-asyncssh: convert to wheel.mk Fix LICENSE while here. @ text @d1 1 a1 1 @@comment $NetBSD$ d197 3 @ 1.13 log @py-asyncssh: updated to 2.12.0 Release 2.12.0 (10 Aug 2022) ---------------------------- * Added top-level functions run_client() and run_server() which allow you to begin running an SSH client or server on an already-connected socket. This capability is also available via a new "sock" argument in the existing connect(), connect_reverse(), get_server_host_key(), and get_server_auth_methods() functions. * Added "sock" argument to listen() and listen_reverse() functions which takes an already-bound listening socket instead of a host and port to bind a new socket to. * Added support for forwarding break, signal, and terminal size updates when redirection of stdin is set up between two SSHProcess instances. * Added support for sntrup761x25519-sha512@@openssh.com post-quantum key exchange algorithm. For this to be available, the Open Quantum Safe (liboqs) dynamic library must be installed. * Added "sig_alg" argument to set a signature algorithm when creating OpenSSH certificates, allowing a choice between ssh-rsa, rsa-sha2-256, and rsa-sha2-512 for certificates signed by RSA keys. * Added new read_parallel() method in SFTPClientFile which allows parallel reads to be performed from a remote file, delivering incremental results as these reads complete. Previously, large reads would automatically be parallelized, but a result was only returned after all reads completed. * Added definition of __all__ for public symbols in AsyncSSH to make pyright autocompletion work better. Thanks go to Nicolas Riebesel for providing this change. * Updated SFTP and SCP glob and copy functions to use scandir() instead of listdir() to improve efficiency. * Updated default for "ignore_encrypted" client connection option to ignore encrypted keys specified in an OpenSSH config file when no passphrase is provided, similar to what was previosuly done for keys with default names. * Fixed an issue when using an SSH agent with RSA keys and an X.509 certificate while requesting SHA-2 signatures. * Fixed an issue with use of expanduser() in unit tests on newer versions of Python. Thanks go to Georg Sauthoff for providing an initial version of this fix. * Fixed an issue with fallback to a Pageant agent not working properly on Windows when no agent_path or SSH_AUTH_SOCK was set. * Fixed improper escaping in readuntil(), causing certain punctuation in separator to not match properly. Thanks go to Github user MazokuMaxy for reporting this issue. * Fixed the connection close handler to properly mark channels as fully closed when the peer unexpected closes the connection, allowing exceptions to fire if an application continues to try and use the channel. Thanks go to Taha Jahangir for reporting this issue and suggesting a possible fix. * Eliminated unit testing against OpenSSH for tests involving DSA and RSA keys using SHA-1 signatures, since this support is being dropped in some distributions of OpenSSH. These tests are still performed, but using only AsyncSSH code. Thanks go to Ken Dreyer and Georg Sauthoff for reporting this issue and helping me to reproduce it. @ text @d1 6 a6 6 @@comment $NetBSD: PLIST,v 1.12 2022/07/08 08:00:42 adam Exp $ ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt ${PYSITELIB}/${EGG_INFODIR}/requires.txt ${PYSITELIB}/${EGG_INFODIR}/top_level.txt @ 1.12 log @py-asyncssh: updated to 2.11.0 Release 2.11.0 (4 Jun 2022) --------------------------- * Made a number of improvements in SFTP glob support, with thanks to Github user LuckyDams for all the help working out these changes! * Added a new glob_sftpname() method which returns glob matches together with attribute information, avoiding the need for a caller to make separate calls to stat() on the returned results. * Switched from listdir() to scandir() to reduce the number of stat() operations required while finding matches. * Added code to remove duplicates when glob() is called with multiple patterns that match the same path. * Added a cache of directory listing and stat results to improve performance when matching patterns with overlapping paths. * Fixed an "index out of range" bug in recursive glob matching and aligned it better with results reeturned by UNIX shells. * Changed matching to ignore inaccessible or non-existent paths in a glob pattern, to allow accessible paths to be fully explored before returning an error. The error handler will now be called only if a pattern results in no matches, or if a more serious error occurs while scanning. * Changed SFTP makedirs() method to work better cases where parts of requested path already exist but don't allow read access. As long as the entire path can be created, makedirs() will succeed, even if some directories on the path don't allow their contents to be read. Thanks go to Peter Rowlands for providing this fix. * Replaced custom Diffie Hellman implementation in AsyncSSH with the one in the cryptography package, resulting in an over 10x speedup. Thanks go to Github user iwanb for suggesting this change. * Fixed AsyncSSH to re-acquire GSS credentials when performing key renegotiation to avoid expired credentials on long-lived connections. Thanks go to Github user PromyLOPh for pointing out this issue and suggesting a fix. * Fixed GSS MIC to work properly with GSS key exchange when AsyncSSH is running as a server. This was previously fixed on the client side, but a similar fix for the server was missed. * Changed connection timeout unit tests to work better in environments where a firewall is present. Thanks go to Stefano Rivera for reporting this issue. * Improved unit tests of Windows SSPI GSSAPI module. * Improved speed of unit tests by reducing the number of key generation calls. RSA key generation in particular has gotten much more expensive in OpenSSL 3. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.11 2022/01/24 12:50:27 adam Exp $ d79 3 @ 1.11 log @py-asyncssh: updated to 2.9.0 Release 2.9.0 (23 Jan 2022) --------------------------- * Added mypy-compatible type annotations to all AsyncSSH modules, and a "py.typed" file to signal that annotations are now available for this package. * Added experimental support for SFTP versions 4-6. While AsyncSSH still defaults to only advertising version 3 when acting as both a client and a server, applications can explicitly enable support for later versions, which will be used if both ends of the connection agree. Not all features are fully supported, but a number of useful enhancements are now available, including as users and groups specified by name, higher resolution timestamps, and more granular error reporting. * Updated documentation to make it clear that keys from a PKCS11 provider or ssh-agent will be used even when client_keys is specified, unless those sources are explicitly disabled. * Improved handling of task cancellation in AsyncSSH to avoid triggering an error of "Future exception was never retrieved". Thanks go to Krzysztof Kotlenga for reporting this issue and providing test code to reliably reproduce it. * Changed implementation of OpenSSH keepalive handler to improve interoperability with servers which don't expect a "success" response when this message is sent. Release 2.8.1 (8 Nov 2021) -------------------------- * Fixed a regression in handling of the passphrase argument used to decrypt private keys. Release 2.8.0 (3 Nov 2021) -------------------------- * Added new connect_timeout option to set a timeout which includes the time taken to open an outbound TCP connection, allowing connections to be aborted without waiting for the default socket connect timeout. The existing login_timeout option only applies after the TCP connection was established, so it could not be used for this. The support for the ConnectTimeout config file option has also been updated to use this new capability, making it more consistent with OpenSSH's behavior. * Added the ability to use the passphrase argument specified in a connect call to be used to decrypt keys used to connect to bastion hosts. Previously, this argument was only applied when making a connection to the main host and encrypted keys could only be used when they were loaded separately. * Updated AsyncSSH's "Record" class to make it more IDE-friendly when it comes to things like auto-completion. This class is used as a base class for SSHCompletedProcess and various SFTP attribute classes. Thanks go to Github user zentarim for suggesting this improvement. * Fixed a potential uncaught exception when handling forwarded connections which are immediately closed by a peer. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.10 2020/09/14 07:40:08 adam Exp $ d55 3 @ 1.10 log @py-asyncssh: updated to 2.4.2 Release 2.4.2 Fixed a potential race condition when receiving EOF right after a channel is opened. Fixed a couple of issues related to the error_handler and progress_handler callbacks in AsyncSSH SFTP/SCP. Fixed a couple of issues related to using pathlib objects with AsyncSSH SCP. Release 2.4.1 Fixed SCP server to send back an exit status when closing the SSH channel, since the OpenSSH scp client returns this status to the shell which executed it. Fixed listeners created by forward_local_port(), forward_local_path(), and forward_socks() to automatically close when the SSH connection closes, unblocking any wait_closed() calls which are in progress. Fixed a potential exception that could trigger when the SSH connection is closed while authentication is in progress. Fixed tunnel connect code to properly clean up an implicitly created tunnel when a failure occurs in trying to open a connection over that tunnel. Release 2.4.0 Added support for accessing keys through a PKCS#11 provider, allowing keys on PIV security tokens to be used directly by AsyncSSH without the need to run an SSH agent. X.509 certificates can also be retrieved from the security token and used with SSH servers which support that. Added support for using Ed25519 and Ed448 keys in X.509 certificates, and the corresponding SSH certificate and signature algorithms. Certificates can use these keys as either subject keys or signing keys, and certificates can be generated by either AsyncSSH or by OpenSSL version 1.1.1 or later. Added support for feed_data() and feed_eof() methods in SSHReader, mirroring methods of the same name in asyncio’s StreamReader to improve interoperability between the two APIs. Updated unit tests to test interoperability with OpenSSL 1.1.1 when reading and writing Ed25519 and Ed448 public and private key files. Previously, due to lack of support in OpenSSL, AsyncSSH could only test against OpenSSH, and only in OpenSSH key formats. With OpenSSL 1.1.1, testing is now also done using PKCS#8 format. Fixed config file parser to properly ignore all comment lines, even if the lines contain unbalanced quotes. Removed a note about the lack of a timeout parameter in the AsyncSSH connect() method, now that it supports a login_timeout argument. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.9 2020/07/27 17:32:51 adam Exp $ d154 1 @ 1.9 log @py-asyncssh: updated to 2.3.0 Release 2.3.0 Added initial support for reading configuration from OpenSSH-compatible config files, when present. Both client and server configuration files are supported, but not all config options are supported. See the AsyncSSH documentation for the latest list of what client and server options are supported, as well as what match conditions and percent substitutions are understood. Added support for the concept of only a subset of supported algorithms being enabled by default, and for the ability to use wildcards when specifying algorithm names. Also, OpenSSH’s syntax of prefixing the list with ‘^’, ‘+’, or ‘-‘ is supported for incrementally adjusting the list of algorithms starting from the default set. Added support for specifying a preferred list of client authentication methods, in order of preference. Previously, the order of preference was hard-coded into AsyncSSH. Added the ability to use AsyncSSH’s “password” argument on servers which are using keyboard-interactive authentication to prompt for a “passcode”. Previously, this was only supported when the prompt was for a “password”. Added support for providing separate lists of private keys and certificates, rather than requiring them to be specifying together as a tuple. When this new option is used, AsyncSSH will automatically associate the private keys with their corresponding certificates if matching certificates are present in the list. Added support for the “known_hosts” argument to accept a list of known host files, rather than just a single file. Known hosts can also be specified using the GlobalKnownHostFile and UserKnownHostFile config file options, each of which can take multiple filenames. Added new “request_tty” option to provide finer grained control over whether AsyncSSH will request a TTY when opening new sessions. The default is to still tie this to whether a “term_type” is specified, but now that can be overridden. Supported options of “yes”, “no”, “force”, and “auto” match the values supported by OpenSSH. Added new “rdns_lookup” option to control whether the server does a reverse DNS of client addresses to allow matching of clients based on hostname in authorized keys and config files. When this option is disabled (the default), matches can only be based on client IP. Added new “send_env” argument when opening a session to forward local environment variables using their existing values, augmenting the “env” argument that lets you specify remote environment variables to set and their corresponding values. Added new “tcp_keepalive” option to control whether TCP-level keepalives are enabled or not on SSH connections. Previously, TCP keepalives were enabled unconditionally and this is still the default, but the new option provides a way to disable them. Added support for sending and parsing client EXT_INFO messages, and for sending the “global-requests-ok” option in these messages when AsyncSSH is acting as a client. Added support for expansion of ‘~’ home directory expansion when specifying arguments which contain filenames. Added support for time intervals and byte counts to optionally be specified as string values with units, allowing for values such as “1.5h” or “1h30m” instead of having to specify that as 5400 seconds. Similarly, a byte count of “1g” can be passed to indicate 1 gigabyte, rather than specifying 1073741824 bytes. Enhanced logging to report lists of sent and received algorithms when no matching algorithm is found. Thanks go to Jeremy Schulman for suggesting this. Fixed an interoperability issue with PKIXSSH when attempting to use X.509 certificates with a signature algorithm of “x509v3-rsa2048-sha256”. Fixed an issue with some links not working in the ReadTheDocs sidebar. Thanks go to Christoph Giese for reporting this issue. Fixed keepalive handler to avoid leaking a timer object in some cases. Thanks go to Tom van Neerijnen for reporting this issue. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.8 2020/03/12 16:36:31 adam Exp $ d145 3 @ 1.8 log @py-asyncssh: updated to 2.2.0 Release 2.2.0 Added support for U2F/FIDO2 security keys, with the following capabilities: ECDSA (NISTP256) and Ed25519 key algorithms Key generation, including control over the application and user the key is associated with and whether touch is required when using the key Certificate generation, both as a key being signed and a CA key Resident keys, allowing security keys to be used on multiple machines without any information being stored outside of the key Access to and management of keys loaded in an OpenSSH ssh-agent Support for both user and host keys and certificates Support for “no-touch-required” option in authorized_keys files Support for “no-touch-required” option in OpenSSH certificates Compatibility with security key support added in OpenSSH version 8.2 Added login timeout client option and limits on the length and number of banner lines AsyncSSH will accept prior to the SSH version header. Improved load_keypairs() to read public key files, confirming that they are consistent with their associated private key when they are present. Fixed issues in the SCP server related to handling filenames with spaces. Fixed an issue with resuming reading after readuntil() returns an incomplete read. Fixed a potential issue related to asyncio not reporting sockname/peername when a connection is closed immediately after it is opened. Made SSHConnection a subclass of asyncio.Protocol to please type checkers. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.7 2019/08/25 12:24:06 adam Exp $ d37 3 @ 1.7 log @py-asyncssh: updated to 1.18.0 Release 1.18.0: Added support for GSSAPI ECDH and Edwards DH key exchange algorithms. Fixed gssapi-with-mic authentication to work with GSS key exchanges, in cases where gssapi-keyex is not supported. Made connect_ssh and connect_reverse_ssh methods into async context managers, simplifying the syntax needed to use them to create tunneled SSH connections. Fixed a couple of issues with known hosts matching on tunneled SSH connections. Improved flexibility of key/certificate parser automatic format detection to properly recognize PEM even when other arbitrary text is present at the beginning of the file. With this change, the parser can also now handle mixing of multiple key formats in a single file. Added support for OpenSSL “TRUSTED” PEM certificates. For now, no enforcement is done of the additional trust restrictions, but such certificates can be loaded and used by AsyncSSH without converting them back to regular PEM format. Fixed some additional SFTP and SCP issues related to parsing of Windows paths with drive letters and paths with multiple colons. Made AsyncSSH tolerant of a client which sends multiple service requests for the “ssh-userauth” service. This is needed by the Paramiko client when it tries more than one form of authentication on a connection. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.6 2019/03/03 12:32:12 adam Exp $ d166 9 @ 1.6 log @py-asyncssh: updated to 1.16.0 1.16.0: Added support for Ed448 host/client keys and certificates and rewrote Ed25519 support to use the PyCA implementation, reducing the dependency on libnacl and libsodium to only be needed to support the chacha20-poly1305 cipher. Added support for PKCS-8 format Ed25519 and Ed448 private and public keys (in addition to the OpenSSH format previously supported). Added support for multiple delimiters in SSHReader’s readuntil() function, causing it to return data as soon as any of the specified delimiters are matched. Added the ability to register custom key handlers in the line editor which can modify the input line, extending the built-in editing functionality. Added SSHSubprocessProtocol and SSHSubprocessTransport classes to provide compatibility with asyncio.SubprocessProtocol and asyncio.SubprocessTransport. Code which is designed to call BaseEventLoop.subprocess_shell() or BaseEventLoop.subprocess_exec() can be easily adapted to work against a remote process by calling SSHClientConnection.create_subprocess(). Added support for sending keepalive messages when the SSH connection is idle, with an option to automatically disconnect the connection if the remote system doesn’t respond to these keepalives. Changed AsyncSSH to ignore errors when loading unsupported key types from the default file locations. Changed the reuse_port option to only be available on Python releases which support it (3.4.4 and later). Fixed an issue where MSG_IGNORE packets could sometimes be sent between MSG_NEWKEYS and MSG_EXT_INFO, which caused some SSH implementations to fail to properly parse the MSG_EXT_INFO. Fixed a couple of errors in the handling of disconnects occurring prior to authentication completing. Renamed “session_encoding” and “session_errors” arguments in asyncssh.create_server() to “encoding” and “errors”, to match the names used for these arguments in other AsyncSSH APIs. The old names are still supported for now, but they are marked as deprecated and will be removed in a future release. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.5 2018/07/04 03:38:34 adam Exp $ a111 3 ${PYSITELIB}/asyncssh/kex_ecdh.py ${PYSITELIB}/asyncssh/kex_ecdh.pyc ${PYSITELIB}/asyncssh/kex_ecdh.pyo @ 1.5 log @py-asyncssh: updated to 1.13.2 Release 1.13.2: Added support for accessing client host keys via the OpenSSH ssh-keysign program when doing host-based authentication. If ssh-keysign is present and enabled on the system, an AsyncSSH based SSH client can use host-based authentication without access to the host private keys. Added support for using pathlib path objects when reading and writing private and public keys and certificates. Added support for auth_completed() callback in the SSHServer class which runs when authentication completes successfully on each new connection. Fixed host-based authentication unit tests to mock out calls to getnameinfo() to avoid failures on systems with restricted network functionality. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.4 2018/06/19 11:37:28 adam Exp $ a51 3 ${PYSITELIB}/asyncssh/crypto/curve25519.py ${PYSITELIB}/asyncssh/crypto/curve25519.pyc ${PYSITELIB}/asyncssh/crypto/curve25519.pyo d61 3 d85 3 a87 3 ${PYSITELIB}/asyncssh/ed25519.py ${PYSITELIB}/asyncssh/ed25519.pyc ${PYSITELIB}/asyncssh/ed25519.pyo d175 3 @ 1.4 log @py-asyncssh: updated to 1.13.1 Release 1.13.1: Added client and server support for host-based SSH authentication. If enabled, this will allow all users from a given host to be authenticated by a shared host key, rather than each user needing their own key. This should only be used with hosts which are trusted to keep their host keys secure and provide accurate client usernames. Added support for RSA key exchange algorithms (rsa2048-sha256 and rsa1024-sha1) available in PuTTY and some mobile SSH clients. Added support for the SECP256K1 elliptic curve for ECDSA keys and ECDH key exchange. This curve is supported by the Bitvise SSH client and server. Added debug logging of the algorithms listed in a received kexinit message. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.3 2018/05/29 07:18:57 adam Exp $ d118 3 @ 1.3 log @py-asyncssh: updated to 1.13.0 Release 1.13.0: Added support for dynamic port forwarding via SOCKS, where AsyncSSH will open a listener which understands SOCKS connect requests and for each request open a TCP/IP tunnel over SSH to the requested host and port. Added support in SSHProcess for I/O redirection to file objects that implement read(), write(), and close() functions as coroutines, such as the “aiofiles” package. In such cases, AsyncSSH will automaically detect that it needs to make async calls to these methods when it performs I/O. Added support for using pathlib objects in SSHProcess I/O redirection. Added multiple improvements to pattern matching support in the SFTPClient glob(), mget(), mput(), and mcopy() methods. AsyncSSH now allows you to use ‘**’ in a pattern to do a recursive directory search, allows character ranges in square brackets in a pattern, and allows a trailing slash in a pattern to be specified to request that only directories matching the pattern should be returned. Fixed an issue with calling readline() and readuntil() with a timeout, where partial data received before the timeout was sometimes discarded. Any partial data which was received when a timeout occurs will now be left in the input buffer, so it is still available to future read() calls. Fixed a race condition where trying to restart a read() after a timeout could sometimes raise an exception about multiple simultaneous reads. Changed readuntil() in SSHReader to raise IncompleteReadError if the receive window fills up before a delimiter match is found. This also applies to readline(), which will return a partial line without a newline at the end when this occurs. To support longer lines, a caller can call readuntil() or readline() as many times as they’d like, appending the data returned to the previous partial data until a delimiter is found or some maximum size is exceeded. Since the default window size is 2 MBytes, though, it’s very unlikely this will be needed in most applications. Reworked the crypto support in AsyncSSH to separate packet encryption and decryption into its own module and simplified the directory structure of the asyncssh.crypto package, eliminating a pyca subdirectory that was created back when AsyncSSH used a mix of PyCA and PyCrypto. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.2 2017/11/17 09:07:02 adam Exp $ a78 3 ${PYSITELIB}/asyncssh/dh.py ${PYSITELIB}/asyncssh/dh.pyc ${PYSITELIB}/asyncssh/dh.pyo a81 3 ${PYSITELIB}/asyncssh/ecdh.py ${PYSITELIB}/asyncssh/ecdh.pyc ${PYSITELIB}/asyncssh/ecdh.pyo d109 9 @ 1.2 log @py-asyncssh: updated to 1.11.1 Release 1.11.1: Switched to using PBKDF2 implementation provided by PyCA, replacing a much slower pure-Python implementation used in earlier releases. Improved support for file-like objects in process I/O redirection, properly handling objects which don’t support fileno() and allowing both text and binary file objects based on whether they have an ‘encoding’ member. Changed PEM parser to be forgiving of trailing blank lines. Updated documentation to note lack of support in OpenSSH for send_signal(), terminate(), and kill() channel requests. Updated unit tests to work better with OpenSSH 7.6. Updated Travis CI config to test with more recent Python versions. @ text @d1 1 a1 1 @@comment $NetBSD: PLIST,v 1.1 2017/10/30 18:21:20 adam Exp $ a30 3 ${PYSITELIB}/asyncssh/cipher.py ${PYSITELIB}/asyncssh/cipher.pyc ${PYSITELIB}/asyncssh/cipher.pyo d55 3 d61 12 a72 24 ${PYSITELIB}/asyncssh/crypto/pyca/__init__.py ${PYSITELIB}/asyncssh/crypto/pyca/__init__.pyc ${PYSITELIB}/asyncssh/crypto/pyca/__init__.pyo ${PYSITELIB}/asyncssh/crypto/pyca/cipher.py ${PYSITELIB}/asyncssh/crypto/pyca/cipher.pyc ${PYSITELIB}/asyncssh/crypto/pyca/cipher.pyo ${PYSITELIB}/asyncssh/crypto/pyca/dsa.py ${PYSITELIB}/asyncssh/crypto/pyca/dsa.pyc ${PYSITELIB}/asyncssh/crypto/pyca/dsa.pyo ${PYSITELIB}/asyncssh/crypto/pyca/ec.py ${PYSITELIB}/asyncssh/crypto/pyca/ec.pyc ${PYSITELIB}/asyncssh/crypto/pyca/ec.pyo ${PYSITELIB}/asyncssh/crypto/pyca/kdf.py ${PYSITELIB}/asyncssh/crypto/pyca/kdf.pyc ${PYSITELIB}/asyncssh/crypto/pyca/kdf.pyo ${PYSITELIB}/asyncssh/crypto/pyca/misc.py ${PYSITELIB}/asyncssh/crypto/pyca/misc.pyc ${PYSITELIB}/asyncssh/crypto/pyca/misc.pyo ${PYSITELIB}/asyncssh/crypto/pyca/rsa.py ${PYSITELIB}/asyncssh/crypto/pyca/rsa.pyc ${PYSITELIB}/asyncssh/crypto/pyca/rsa.pyo ${PYSITELIB}/asyncssh/crypto/pyca/x509.py ${PYSITELIB}/asyncssh/crypto/pyca/x509.pyc ${PYSITELIB}/asyncssh/crypto/pyca/x509.pyo d76 3 d97 3 d163 3 @ 1.1 log @py-asyncssh: added version 1.11.0 AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework. @ text @d1 1 a1 1 @@comment $NetBSD$ d73 3 @