asyncssh

AsyncSSH: Asynchronous SSH for Python

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.6+ asyncio framework.

import asyncio, asyncssh, sys

async def run_client():
    async with asyncssh.connect('localhost') as conn:
        result = await conn.run('echo "Hello!"', check=True)
        print(result.stdout, end='')

try:
    asyncio.get_event_loop().run_until_complete(run_client())
except (OSError, asyncssh.Error) as exc:
    sys.exit('SSH connection failed: ' + str(exc))

Check out the examples to get started!

Features

Full support for SSHv2, SFTP, and SCP client and server functions
- Shell, command, and subsystem channels
- Environment variables, terminal type, and window size
- Direct and forwarded TCP/IP channels
- OpenSSH-compatible direct and forwarded UNIX domain socket channels
- OpenSSH-compatible TUN/TAP channels and packet forwarding
- Local and remote TCP/IP port forwarding
- Local and remote UNIX domain socket forwarding
- Dynamic TCP/IP port forwarding via SOCKS
- X11 forwarding support on both the client and the server
- SFTP protocol version 3 with OpenSSH extensions
  - Experimental support for SFTP versions 4-6, when requested
- SCP protocol support, including third-party remote to remote copies
Multiple simultaneous sessions on a single SSH connection
Multiple SSH connections in a single event loop
Byte and string based I/O with settable encoding
A variety of key exchange, encryption, and MAC algorithms
- Including OpenSSH post-quantum kex algorithm sntrup761x25519-sha512@openssh.com
Support for gzip compression
- Including OpenSSH variant to delay compression until after auth
User and host-based public key, password, and keyboard-interactive authentication methods
Many types and formats of public keys and certificates
- Including OpenSSH-compatible support for U2F and FIDO2 security keys
- Including PKCS#11 support for accessing PIV security tokens
- Including support for X.509 certificates as defined in RFC 6187
Support for accessing keys managed by ssh-agent on UNIX systems
- Including agent forwarding support on both the client and the server
Support for accessing keys managed by PuTTY’s Pageant agent on Windows
Support for accessing host keys via OpenSSH’s ssh-keysign
OpenSSH-style known_hosts file support
OpenSSH-style authorized_keys file support
Partial support for OpenSSH-style configuration files
Compatibility with OpenSSH “Encrypt then MAC” option for better security
Time and byte-count based session key renegotiation
Designed to be easy to extend to support new forms of key exchange, authentication, encryption, and compression algorithms

License

This package is released under the following terms:

Copyright (c) 2013-2022 by Ron Frederick <ronf@timeheart.net> and others.

This program and the accompanying materials are made available under the terms of the Eclipse Public License v2.0 which accompanies this distribution and is available at:

http://www.eclipse.org/legal/epl-2.0/

This program may also be made available under the following secondary licenses when the conditions for such availability set forth in the Eclipse Public License v2.0 are satisfied:

GNU General Public License, Version 2.0, or any later versions of that license

SPDX-License-Identifier: EPL-2.0 OR GPL-2.0-or-later

For more information about this license, please see the Eclipse Public License FAQ.

Prerequisites

To use AsyncSSH 2.0 or later, you need the following:

Python 3.6 or later
cryptography (PyCA) 3.1 or later

Installation

Install AsyncSSH by running:

pip install asyncssh

Optional Extras

There are some optional modules you can install to enable additional functionality:

Install bcrypt from https://pypi.python.org/pypi/bcrypt if you want support for OpenSSH private key encryption.
Install fido2 from https://pypi.org/project/fido2 if you want support for key exchange and authentication with U2F/FIDO2 security keys.
Install python-pkcs11 from https://pypi.org/project/python-pkcs11 if you want support for accessing PIV keys on PKCS#11 security tokens.
Install gssapi from https://pypi.python.org/pypi/gssapi if you want support for GSSAPI key exchange and authentication on UNIX.
Install liboqs from https://github.com/open-quantum-safe/liboqs if you want support for the OpenSSH post-quantum key exchange algorithm sntrup761x25519-sha512@openssh.com.
Install libsodium from https://github.com/jedisct1/libsodium and libnacl from https://pypi.python.org/pypi/libnacl if you have a version of OpenSSL older than 1.1.1b installed and you want support for Curve25519 key exchange, Ed25519 keys and certificates, or the Chacha20-Poly1305 cipher.
Install libnettle from http://www.lysator.liu.se/~nisse/nettle/ if you want support for UMAC cryptographic hashes.
Install pyOpenSSL from https://pypi.python.org/pypi/pyOpenSSL if you want support for X.509 certificate authentication.
Install pywin32 from https://pypi.python.org/pypi/pywin32 if you want support for using the Pageant agent or support for GSSAPI key exchange and authentication on Windows.

AsyncSSH defines the following optional PyPI extra packages to make it easy to install any or all of these dependencies:

bcrypt

fido2

gssapi

libnacl

pkcs11

pyOpenSSL

pywin32

For example, to install bcrypt, fido2, gssapi, libnacl, pkcs11, and pyOpenSSL on UNIX, you can run:

pip install 'asyncssh[bcrypt,fido2,gssapi,libnacl,pkcs11,pyOpenSSL]'

To install bcrypt, fido2, libnacl, pkcs11, pyOpenSSL, and pywin32 on Windows, you can run:

pip install 'asyncssh[bcrypt,fido2,libnacl,pkcs11,pyOpenSSL,pywin32]'

Note that you will still need to manually install the libsodium library listed above for libnacl to work correctly and/or libnettle for UMAC support. Unfortunately, since liboqs, libsodium, and libnettle are not Python packages, they cannot be directly installed using pip.

Installing the development branch

If you would like to install the development branch of asyncssh directly from Github, you can use the following command to do this:

pip install git+https://github.com/ronf/asyncssh@develop

Mailing Lists

Three mailing lists are available for AsyncSSH:

asyncssh-announce@googlegroups.com: Project announcements
asyncssh-dev@googlegroups.com: Development discussions
asyncssh-users@googlegroups.com: End-user discussions

Metadata

Release files for asyncssh 2.15.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for asyncssh 2.15.0
File	Size	Uploaded	Provenance
asyncssh-2.15.0.tar.gz	516.9 kB	Jul 3, 2024	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for asyncssh 2.15.0
File	Interpreter	ABI	Platform	Reset
asyncssh-2.15.0-py3-none-any.whl 360.4 kB Jul 3, 2024 Without provenance	Python 3	none	any	Details

Total release size: 877.3 kB

Release files / asyncssh-2.15.0.tar.gz

Download URL	asyncssh-2.15.0.tar.gz
Size	516.9 kB
Tags	Source
SHA-256 checksum How to use checksums	`0a13a43816f46cf084657fb05596823b93d5b48e75ef7763c8a756ec1217837a`
BLAKE2b-256 checksum How to use checksums	`9c0312850895815bc6d4d87e98030b016a20886343df4334681443db0234366e`
Upload date	Jul 3, 2024
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/4.0.2 CPython/3.10.14`

Release files / asyncssh-2.15.0-py3-none-any.whl

Download URL	asyncssh-2.15.0-py3-none-any.whl
Size	360.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`72d140a4a4f6d246d04eabfe0052a9b94475d6d814ef1cc7bb8b3860d0ce39e5`
BLAKE2b-256 checksum How to use checksums	`ddb640dc820300d1038353633c9e0ef72014430371d20fa8a738ab2b0c21131e`
Upload date	Jul 3, 2024
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/4.0.2 CPython/3.10.14`

Security for asyncssh 2.15.0

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.