Re: which is better libssh or libssh2

"shyam" <shyam.geek@xxxxxxxxx> writes:

It is not a class assignment

And the choice of sftp is more so because of security rather than
performance and speed which will not be a issue since this is going to
work on a intranet.And script is also out of question because of some
external interfaces.

security? And how is sftp more secure than scp or rsync over ssh? You said
there were speed issues and now you say there are no speed issues.
external interfaces? What does that mean?



I just wanted an opinion about libssh & libssh2.Are these libraries
stable enough to be used in a 24x7 operation?

It depends on how you use them.
As I said AFAIK libssh2 impliments the ssh2 protocol which is more secure
than the old ssh 1 protocol.



thanks
Shyam

Unruh wrote:
"shyam" <shyam.geek@xxxxxxxxx> writes:


Unruh wrote:
"shyam" <shyam.geek@xxxxxxxxx> writes:

Hi ALL

I am about to start writing a module for bulk transfer of files using
sftp.

I cant use scripts due to some performance issues amongst others
Going through the web I found libssh and linssh2 API available.

But as per my knowledge these are not available with REDHAT enterprise
linux , which is the OS I am going to develop the module.

Not sure. They are available to mandriva and have been since 2005 (10.2)
You do not tell us which version of Enterprise.

It is version 3 of enterprise linux

Anyway ssh2 is the more recent one and fixes severe secrurity holes in
ssh from what I know. But why would you write your own implimentation of
ssh.

I am not planning to write my own implementation but trying to use the
available APIs

It is hard to imagine where any performance issues would make writing
your own better than useing someone elses stuff. The internet is not that
fast-- ie, transmission timing will swamp any script issues. And sftp is
probably one of the slowest ways. Why not use scp or rsync instead.
Espacially rsync if you are transfering the same files over and over.


Its the requirement that I use only sftp and not scp or others

Is this a class assignment? If not whoever set the specifications does not
know what they are talking about. Just write a script and when it runs
slowly tell them that it is because sftp is being used as they required. If
they want something that works, use a better transfer protocol




Can anybody suggest which one is better option

thanks
SHyam

.

Relevant Pages

  • Re: secure ftp on the mainframe
    ... neither TLS nor SSH. ... "SFTP is not FTP at all. ... For IBM-MAIN subscribe / signoff / archive access instructions, ...
    (bit.listserv.ibm-main)
  • Re: SSH1 FTP client for Windows
    ... that the SFTP is wedded to SSH-2. ... Again, from a protocol standpoint, SFTP has *no* dependence on what ... it run over SSH at all. ... scp simply calls ssh to connect to the remote ...
    (comp.security.ssh)
  • Re: Secure file transfer
    ... comes with ssh packages like openssh transfers everything (command and ... data) through a SSH link. ... No, sftp users a different protocol to scp but it normally runs entirely over ssh. ...
    (comp.security.misc)
  • Re: WinSCP
    ... Howto Setup a chroot jail for ssh / scp / sftp with Linux ... Sound like the sftp subsystem settings in your script are not the same ...
    (comp.os.linux.networking)
  • [dev] initiating sftp subsystem (ssh 1.5)
    ... I would like to implement sftp on top of ssh 1.5. ... «When used with the SSH2 Protocol suite, ... be used from the SSH Connection Protocol as a subsystem, ...
    (comp.security.ssh)