Re: Implement SCP server

[Jakub Jelen <jjelen@xxxxxxxxxx>]

On Fri, 2019-06-28 at 07:20 +0200, Andreas Schneider wrote:
> On Friday, June 28, 2019 1:47:29 AM CEST Alberto Garcia wrote:
> > Hi,
> > 
> > I have a working SSH server created using libssh. I would like to
> > know how
> > can I implement scp capabilities into it so it can be used to copy
> > file
> > from/to it.
> > 
> > I've seen documentation about using libssh as a client but nothing
> > regarding a server.
> 
> Don't use scp, use sftp. scp is just horrible.

Especially after the recent SCP vulnerabilities [1], I do not think it
makes sense to create anything new based on the ancient scp.

For writing your own sftp server, I do not see any examples in the git,
but checking src/sftpserver.c is probably a good start.

[1] 
https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt

Regards,
-- 
Jakub Jelen
Senior Software Engineer
Security Technologies
Red Hat, Inc.