paramiko/paramiko
Paramiko
Paramiko is a pure-Python implementation of the SSH2 protocol, providing a library for making secure network connections and executing remote commands. It serves as a programmatic interface for establishing encrypted communication tunnels and managing remote sessions.
The project includes a full SSH server framework, allowing applications to host a secure shell server and define server-side access configurations directly within Python. It also provides a dedicated SFTP client library for secure file transfers and remote filesystem management.
The library covers remote infrastructure automation through command execution and session management. It handles security and identity via host key verification and user authentication using passwords, private keys, or secure agents. It further includes a configuration parsing engine to resolve host settings from system and user SSH configuration files.
Features
- SSH Protocol Implementations - Provides a pure-Python implementation of the SSH2 protocol to avoid native C library dependencies.
- SFTP Subsystems - Integrates a dedicated SFTP subsystem for remote filesystem operations over a secure channel.
- Remote Workspace Command Execution - Offers a programmatic interface for running shell commands on distant hosts and retrieving output.
- SSH-Based Remote Execution - Runs shell commands on remote servers via SSH to automate administrative tasks.
- Remote Command Execution - Provides a programmatic interface for executing shell commands on remote servers via the SSH2 protocol.
- SSH - Establishes and maintains encrypted communication channels for secure remote data transmission.
- Secure Communication Channels - Establishes encrypted communication tunnels to protect data transmission between local and remote systems.
- Public Key Authentication - Implements the cryptographic handshake for key-based authentication without password transmission.
- Secure Remote Connectivity Tools - Implements the cryptographic handshaking and session negotiation required for secure remote access.
- Transport Layer Security - Wraps TCP sockets in an encrypted layer using symmetric keys and HMACs.
- User Authentication Systems - Verifies user identity using passwords, private keys, or secure agents to grant session access.
- Remote File Transfers - Provides capabilities for uploading, downloading, and modifying permissions on remote servers.
- Secure File Transfer - Moves files between local and remote systems using encrypted SSH protocols.
- SSH Server Primitives - Ships low-level primitives for hosting a secure shell server directly within Python applications.
- SSH Server Frameworks - Provides a framework for building a secure shell server directly into a Python application.
- Encrypted Tunneling - Creates flow-controlled encrypted tunnels to send and receive data over secure sessions.
- Host Key Verifications - Verifies remote server public keys against stored records to prevent man-in-the-middle attacks.
- Secure Server Frameworks - Provides a full SSH server framework to host secure shell servers directly within Python applications.
- Server Access Controls - Defines permitted users, authentication methods, and channel types for connections to a hosted secure shell server.
- Remote Infrastructure Management - Automates authentication and session management for programmatic control of remote infrastructure.
- Infrastructure and Automation - Native SSHv2 protocol implementation.
- SSH Libraries - Native Python library for the SSHv2 protocol.
- Kryptographie - Implements the SSHv2 protocol for secure remote connections.
