aspera-cli 4.1.0 → 4.3.0

data/lib/aspera/sync.rb

@@ -1,48 +1,53 @@
+require 'aspera/command_line_builder'
+
 module Aspera
   # builds command line arg for async
   class Sync
-    private
     INSTANCE_PARAMS=
     {
-      'alt_logdir'           => { :type => :opt_with_arg, :accepted_types=>String},
-      'watchd'               => { :type => :opt_with_arg, :accepted_types=>String},
-      'apply_local_docroot'  => { :type => :opt_without_arg},
-      'quiet'                => { :type => :opt_without_arg},
+      'alt_logdir'           => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'watchd'               => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'apply_local_docroot'  => { :cltype => :opt_without_arg},
+      'quiet'                => { :cltype => :opt_without_arg},
     }
     SESSION_PARAMS=
     {
-      'name'                 => { :type => :opt_with_arg, :accepted_types=>String},
-      'local_dir'            => { :type => :opt_with_arg, :accepted_types=>String},
-      'remote_dir'           => { :type => :opt_with_arg, :accepted_types=>String},
-      'local_db_dir'         => { :type => :opt_with_arg, :accepted_types=>String},
-      'remote_db_dir'        => { :type => :opt_with_arg, :accepted_types=>String},
-      'host'                 => { :type => :opt_with_arg, :accepted_types=>String},
-      'user'                 => { :type => :opt_with_arg, :accepted_types=>String},
-      'private_key_path'     => { :type => :opt_with_arg, :accepted_types=>String},
-      'direction'            => { :type => :opt_with_arg, :accepted_types=>String},
-      'checksum'             => { :type => :opt_with_arg, :accepted_types=>String},
-      'tcp_port'             => { :type => :opt_with_arg, :accepted_types=>Integer},
-      'rate_policy'          => { :type => :opt_with_arg, :accepted_types=>String},
-      'target_rate'          => { :type => :opt_with_arg, :accepted_types=>String},
-      'cooloff'              => { :type => :opt_with_arg, :accepted_types=>Integer},
-      'pending_max'          => { :type => :opt_with_arg, :accepted_types=>Integer},
-      'scan_intensity'       => { :type => :opt_with_arg, :accepted_types=>String},
-      'cipher'               => { :type => :opt_with_arg, :accepted_types=>String},
-      'transfer_threads'     => { :type => :opt_with_arg, :accepted_types=>Integer},
-      'preserve_time'        => { :type => :opt_without_arg},
-      'preserve_access_time' => { :type => :opt_without_arg},
-      'preserve_modification_time' => { :type => :opt_without_arg},
-      'preserve_uid'         => { :type => :opt_without_arg},
-      'preserve_gid'         => { :type => :opt_without_arg},
-      'create_dir'           => { :type => :opt_without_arg},
-      'reset'                => { :type => :opt_without_arg},
+      'name'                 => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'local_dir'            => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'remote_dir'           => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'local_db_dir'         => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'remote_db_dir'        => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'host'                 => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'user'                 => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'private_key_path'     => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'direction'            => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'checksum'             => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'tcp_port'             => { :cltype => :opt_with_arg, :accepted_types=>:int},
+      'rate_policy'          => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'target_rate'          => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'cooloff'              => { :cltype => :opt_with_arg, :accepted_types=>:int},
+      'pending_max'          => { :cltype => :opt_with_arg, :accepted_types=>:int},
+      'scan_intensity'       => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'cipher'               => { :cltype => :opt_with_arg, :accepted_types=>:string},
+      'transfer_threads'     => { :cltype => :opt_with_arg, :accepted_types=>:int},
+      'preserve_time'        => { :cltype => :opt_without_arg},
+      'preserve_access_time' => { :cltype => :opt_without_arg},
+      'preserve_modification_time' => { :cltype => :opt_without_arg},
+      'preserve_uid'         => { :cltype => :opt_without_arg},
+      'preserve_gid'         => { :cltype => :opt_without_arg},
+      'create_dir'           => { :cltype => :opt_without_arg},
+      'reset'                => { :cltype => :opt_without_arg},
       # note: only one env var, but multiple sessions... may be a problem
-      'remote_password'      => { :type => :envvar, :variable=>'ASPERA_SCP_PASS'},
-      'cookie'               => { :type => :envvar, :variable=>'ASPERA_SCP_COOKIE'},
-      'token'                => { :type => :envvar, :variable=>'ASPERA_SCP_TOKEN'},
-      'license'              => { :type => :envvar, :variable=>'ASPERA_SCP_LICENSE'},
+      'remote_password'      => { :cltype => :envvar, :clvarname=>'ASPERA_SCP_PASS'},
+      'cookie'               => { :cltype => :envvar, :clvarname=>'ASPERA_SCP_COOKIE'},
+      'token'                => { :cltype => :envvar, :clvarname=>'ASPERA_SCP_TOKEN'},
+      'license'              => { :cltype => :envvar, :clvarname=>'ASPERA_SCP_LICENSE'},
     }
-    public
+
+    Aspera::CommandLineBuilder.normalize_description(INSTANCE_PARAMS)
+    Aspera::CommandLineBuilder.normalize_description(SESSION_PARAMS)
+
+    private_constant :INSTANCE_PARAMS,:SESSION_PARAMS
 
     def initialize(sync_params)
       @sync_params=sync_params

data/lib/aspera/timer_limiter.rb

@@ -0,0 +1,22 @@
+module Aspera
+  # used to throttle logs
+  class TimerLimiter
+    # @param delay in seconds (float)
+    def initialize(delay)
+      @delay=delay
+      @last_time=nil
+      @count=0
+    end
+
+    def trigger?
+      old_time=@last_time
+      @last_time=Time.now.to_f
+      @count+=1
+      if old_time.nil? or (@last_time-old_time)>@delay
+        @count=0
+        return true
+      end
+      return false
+    end
+  end
+end

data/lib/aspera/web_auth.rb

@@ -0,0 +1,105 @@
+require 'webrick'
+require 'webrick/https'
+require 'thread'
+
+module Aspera
+  class WebAuth
+    # server for auth page
+    class FxGwServlet < WEBrick::HTTPServlet::AbstractServlet
+      def initialize(server,info) # additional args get here
+        @shared=info
+      end
+
+      def do_GET (request, response)
+        if ! request.path.eql?(@shared[:expected_path])
+          response.status=400
+          return
+        end
+        @shared[:mutex].synchronize do
+          @shared[:query]=request.query
+          @shared[:cond].signal
+        end
+        response.status=200
+        response.content_type = 'text/html'
+        response.body='<html><head><title>Ok</title></head><body><h1>Thank you !</h1><p>You can close this window.</p></body></html>'
+      end
+    end # FxGwServlet
+
+    # generates and adds self signed cert to provided webrick options
+    def fill_self_signed_cert(options)
+      key = OpenSSL::PKey::RSA.new(4096)
+      cert = OpenSSL::X509::Certificate.new
+      cert.subject = cert.issuer = OpenSSL::X509::Name.parse('/C=FR/O=Test/OU=Test/CN=Test')
+      cert.not_before = Time.now
+      cert.not_after = Time.now + 365 * 24 * 60 * 60
+      cert.public_key = key.public_key
+      cert.serial = 0x0
+      cert.version = 2
+      ef = OpenSSL::X509::ExtensionFactory.new
+      ef.issuer_certificate = cert
+      ef.subject_certificate = cert
+      cert.extensions = [
+        ef.create_extension('basicConstraints','CA:TRUE', true),
+        ef.create_extension('subjectKeyIdentifier', 'hash'),
+        # ef.create_extension('keyUsage', 'cRLSign,keyCertSign', true),
+      ]
+      cert.add_extension(ef.create_extension('authorityKeyIdentifier','keyid:always,issuer:always'))
+      cert.sign(key, OpenSSL::Digest::SHA256.new)
+      options[:SSLPrivateKey]  = key
+      options[:SSLCertificate] = cert
+    end
+
+    def initialize(endpoint_url)
+      uri=URI.parse(endpoint_url)
+      webrick_options = {
+        :app                => WebAuth,
+        :Port               => uri.port,
+        :Logger             => Log.log
+      }
+      uri_path=uri.path.empty? ? '/' : uri.path
+      case uri.scheme
+      when 'http'
+        Log.log.debug('HTTP mode')
+      when 'https'
+        webrick_options[:SSLEnable]=true
+        webrick_options[:SSLVerifyClient]=OpenSSL::SSL::VERIFY_NONE
+        case 0
+        when 0
+          # generate self signed cert
+          fill_self_signed_cert(webrick_options)
+        when 1
+          # short
+          webrick_options[:SSLCertName]    = [ [ 'CN',WEBrick::Utils::getservername ] ]
+          Log.log.error(">>>#{webrick_options[:SSLCertName]}")
+        when 2
+          # good cert
+          webrick_options[:SSLPrivateKey] =OpenSSL::PKey::RSA.new(File.read('/Users/laurent/workspace/Tools/certificate/myserver.key'))
+          webrick_options[:SSLCertificate] = OpenSSL::X509::Certificate.new(File.read('/Users/laurent/workspace/Tools/certificate/myserver.crt'))
+        end
+      end
+      # parameters for servlet
+      @shared_info={
+        expected_path: uri_path,
+        mutex: Mutex.new,
+        cond: ConditionVariable.new
+      }
+      @server = WEBrick::HTTPServer.new(webrick_options)
+      @server.mount(uri_path, FxGwServlet, @shared_info) # additional args provided to constructor
+      Thread.new { @server.start }
+    end
+
+    # wait for request on web server
+    # @return Hash the query
+    def get_request
+      Log.log.debug('get_request')
+      # called only once
+      raise "error, called twice ?" if @server.nil?
+      @shared_info[:mutex].synchronize do
+        @shared_info[:cond].wait(@shared_info[:mutex])
+      end
+      @server.shutdown
+      @server=nil
+      return @shared_info[:query]
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aspera-cli
 version: !ruby/object:Gem::Version
-  version: 4.1.0
+  version: 4.3.0
 platform: ruby
 authors:
 - Laurent Martin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-10-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: xml-simple
@@ -150,6 +150,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -211,8 +225,8 @@ files:
 - docs/README.md
 - docs/diagrams.txt
 - docs/test_env.conf
-- docs/transfer_spec.html
 - examples/aoc.rb
+- examples/faspex4.rb
 - examples/proxy.pac
 - examples/transfer.rb
 - lib/aspera/aoc.rb
@@ -270,10 +284,12 @@ files:
 - lib/aspera/fasp/manager.rb
 - lib/aspera/fasp/node.rb
 - lib/aspera/fasp/parameters.rb
+- lib/aspera/fasp/parameters.yaml
 - lib/aspera/fasp/resume_policy.rb
 - lib/aspera/fasp/uri.rb
 - lib/aspera/faspex_gw.rb
 - lib/aspera/hash_ext.rb
+- lib/aspera/id_generator.rb
 - lib/aspera/log.rb
 - lib/aspera/nagios.rb
 - lib/aspera/node.rb
@@ -293,10 +309,13 @@ files:
 - lib/aspera/rest_call_error.rb
 - lib/aspera/rest_error_analyzer.rb
 - lib/aspera/rest_errors_aspera.rb
+- lib/aspera/secrets.rb
 - lib/aspera/ssh.rb
 - lib/aspera/sync.rb
 - lib/aspera/temp_file_manager.rb
+- lib/aspera/timer_limiter.rb
 - lib/aspera/uri_reader.rb
+- lib/aspera/web_auth.rb
 homepage: https://github.com/IBM/aspera-cli
 licenses:
 - Apache-2.0

data/docs/transfer_spec.html

@@ -1,99 +0,0 @@
-<html>
-<head>
-<title>Transfer Specification</title>
-<style type="text/css">
-table {border-collapse: collapse;}
-table, th, td {border: 1px solid black;}
-.yes {color:white;background-color:green;font-weight:bold;}
-.no  {color:white;background-color:red;font-weight:bold;}
-</style>
-</head>
-<body>
-<p>
-Columns:
-<ul>
-<li>F=Fasp Manager(local FASP execution)</li>
-<li>N=remote node(node API)</li>
-<li>C=Connect Client(web plugin)</li>
-</ul>
-</p>
-<p>
-Req/Def : Required or default value (- means emty)
-</p>
-<p>
-Fields with EX_ prefix are specific extensions to local mode.
-</p>
-<p>
-arg: related ascp argument or env var suffix (PASS for ASPERA_SCP_PASS)
-</p>
-<p>
-UNDER CONSTRUCTION<br/>
-<a href="https://developer.ibm.com/apis/catalog/?search=aspera">Aspera API Documentation</a>&rarr;Node API&rarr;/opt/transfers<br/>
-</p>
-
-<table>
-<tr><th>Field</th><th>Req/Def</th><th>Type</th><th>F</th><th>N</th><th>C</th><th>arg</th><th>Description</th></tr>
-<tr><td>direction</td><td>Required</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--mode</td><td>Direction: "send" or "receive"</td></tr>
-<tr><td>remote_host</td><td>Required</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--host</td><td>IP or fully qualified domain name of the remote server</td></tr>
-<tr><td>remote_user</td><td>Required</td><td>string</td></td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--user</td><td>Remote user. Default value is "xfer" on node or connect.</td></tr>
-<tr><td>destination_root</td><td>Required</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>last arg</td><td>Destination root directory.</td></tr>
-<tr><td>title</td><td>-</td><td>string</td><td class="no">N</td><td class="yes">Y</td><td class="yes">Y</td><td>-</td><td>Title of the transfer</td></tr>
-<tr><td>tags</td><td>-</td><td>hash</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--tags<br>--tags64</td><td>Metadata for transfer</td></tr>
-<tr><td>token</td><td>-</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>TOKEN<br/>-W</td><td>Authorization token: Bearer, Basic or ATM</td></tr>
-<tr><td>cookie</td><td>-</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>COOKIE</td><td>Metadata for transfer (older,string)</td></tr>
-<tr><td>remote_access_key</td><td>TODO</td><td>string</td><td></td><td></td><td></td><td>?</td><td>Node only?</td></tr>
-<tr><td>source_root</td><td>-</td><td>string</td><td></td><td></td><td></td><td>--source-prefix<br/>--source-prefix64</td><td>Source root directory.(TODO: verify option)</td></tr>
-<tr><td>fasp_port</td><td>33001</td><td>integer</td></td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-O</td><td>Specifies fasp (UDP) port.</td></tr>
-<tr><td>ssh_port</td><td>22 or 33001</td><td>integer</td></td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-P</td><td>Specifies ssh (TCP) port.</td></tr>
-<tr><td>rate_policy</td><td>server config</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--policy</td><td>Valid literals include "low","fair","high" and "fixed".</td></tr>
-<tr><td>symlink_policy</td><td>follow</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--symbolic-links</td><td>copy, follow, copy+force, skip.  Default is follow.  Handle source side symbolic links by following the link (follow), copying the link itself (copy),  skipping (skip), or forcibly copying the link itself (copy+force).</td></tr>
-<tr><td>target_rate_kbps</td><td>-</td><td>integer</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-l</td><td>Specifies desired speed for the transfer.</td></tr>
-<tr><td>min_rate_kbps</td><td>0</td><td>integer</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-m</td><td>Set the minimum transfer rate in kilobits per second.</td></tr>
-<tr><td>cipher</td><td>none</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-c</td><td>in transit encryption type.<br/>none, aes-128, aes-256</td></tr>
-<tr><td>content_protection</td><td>encrypt<br/>decrypt</td><td>string</td><td></td><td></td><td></td><td>--file-crypt=</td><td>encryption at rest</td></tr>
-<tr><td>content_protection_password</td><td>-</td><td>string</td><td></td><td></td><td></td><td>PASS</td><td>Specifies a string password.</td></tr>
-<tr><td>overwrite</td><td>diff</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--overwrite</td><td>Overwrite destination files with the source files of the same name.<br/>never, always, diff, older, or diff+older</td></tr>
-<tr><td>retry_duration</td><td></td><td>string</td><td></td><td></td><td></td><td>TODO</td><td>Specifies how long to wait before retrying transfer. (e.g. "5min")</td></tr>
-<tr><td>http_fallback</td><td></td><td>bool (node), integer</td><td></td><td></td><td></td><td>-y<br/>TODO</td><td>When true(1), attempts to perform an HTTP transfer if a fasp transfer cannot be performed.</td></tr>
-<tr><td>create_dir</td><td></td><td>boolean</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-d</td><td>Specifies whether to create new directories.</td></tr>
-<tr><td>precalculate_job_size</td><td>srv. def.</td><td>boolean</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>--precalculate-job-size</td><td>Specifies whether to precalculate the job size.</td></tr>
-<tr><td>delete_source</td><td></td><td>boolean</td><td></td><td class="yes">Y</td><td></td><td>?</td><td>?</td></tr>
-<tr><td>remove_after_transfer</td><td></td><td>boolean</td><td></td><td class="yes">Y</td><td></td><td>?</td><td>Specifies whether to remove file after transfer.</td></tr>
-<tr><td>remove_empty_directories</td><td></td><td>boolean</td><td></td><td class="yes">Y</td><td></td><td>?</td><td>Specifies whether to remove empty directories.</td></tr>
-<tr><td>multi_session</td><td>1</td><td>integer</td><td class="no">N</td><td class="yes">Y</td><td class="no">N</td><td>-C</td><td>Specifies how many parts the transfer is in.</td></tr>
-<tr><td>multi_session_threshold</td><td>null</td><td>integer</td><td class="no">N</td><td class="yes">Y</td><td class="no">N</td><td>-</td><td>in bytes</td></tr>
-<tr><td>exclude_newer_than</td><td></td><td>integer</td><td class="yes">Y</td><td></td><td></td><td>--exclude-newer-than</td><td>-</td></tr>
-<tr><td>exclude_older_than</td><td></td><td>integer</td><td class="yes">Y</td><td></td><td></td><td>--exclude-older-than</td><td>-</td></tr>
-<tr><td>preserve_acls</td><td></td><td>string</td><td class="yes">Y</td><td></td><td></td><td>--preserve-acls</td><td>-</td></tr>
-<tr><td>dgram_size</td><td></td><td>integer</td><td class="yes">Y</td><td></td><td></td><td>-Z</td><td>in bytes</td></tr>
-<tr><td>compression</td><td></td><td>integer</td><td></td><td></td><td></td><td></td><td>ascp4 only, 0 / 1?</td></tr>
-<tr><td>read_threads</td><td></td><td>integer</td><td></td><td></td><td></td><td>-</td><td>ascp4 only</td></tr>
-<tr><td>write_threads</td><td></td><td>integer</td><td></td><td></td><td></td><td>-</td><td>ascp4 only</td></tr>
-<tr><td>use_ascp4</td><td>false</td><td>boolean</td><td></td><td class="yes">Y</td><td></td><td>-</td><td>specify version of protocol</td></tr>
-<tr><td>paths</td><td>source files (dest)</td><td>array</td><td></td><td></td><td></td><td>positional<br/>--file-list<br/>--file-pair-list</td><td>Contains a path to the source (required) and a path to the destination.</td></tr>
-<tr><td>http_fallback_port</td><td></td><td>integer</td><td class="yes">Y</td><td></td><td></td><td>-t</td><td>Specifies http port.</td></tr>
-<tr><td>https_fallback_port</td><td></td><td>integer</td><td></td><td></td><td></td><td>todo</td><td>Specifies https port.</td></tr>
-<tr><td>cipher_allowed</td><td></td><td>string</td><td></td><td></td><td></td><td>-</td><td>returned by node API. Valid literals include "aes-128" and "none".</td></tr>
-<tr><td>target_rate_cap_kbps</td><td></td><td></td><td class="no">N</td><td class="no">?</td><td class="yes">?</td><td>-</td><td>Returned by upload/download_setup node api.</td></tr>
-<tr><td>rate_policy_allowed</td><td></td><td></td><td></td><td></td><td></td><td>-</td><td>returned by node API. Specifies most aggressive rate policy that is allowed. Valid literals include "low", "fair","high" and "fixed".</td></tr>
-<tr><td>ssh_private_key</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>KEY</td><td>Private key used for SSH authentication, Shall look like: `-----BEGIN RSA PRIVATE KEY-----\nMII`<br/>Note the JSON encoding `\` + `n` for newlines.</td></tr>
-<tr><td>remote_password</td><td>-</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>PASS</td><td>SSH session password</td></tr>
-<tr><td>resume_policy</td><td>faspmgr:<br/>none<br/>other:<br/>sparse_csum</td><td>string</td><td class="yes">Y</td><td class="yes">Y</td><td class="yes">Y</td><td>-k</td><td>none,attrs,sparse_csum,full_csum</td></tr>
-<tr><td>authentication</td><td>-</td><td class="no">N</td><td class="no">N</td><td class="yes">Y</td><td>-</td><td>token: Aspera web keys are provided to allow transparent web based session initiation. on connect: password is not asked. Else, password is asked, and keys are not provided.</td></tr>
-<tr><td>EX_ssh_key_paths</td><td>-</td><td>array</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>-i</td><td>Use public key authentication and specify the private key file</td></tr>
-<tr><td>EX_at_rest_password</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>FILEPASS</td><td>Passphrase used for at rest encryption or decryption</td></tr>
-<tr><td>EX_proxy_password</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>PROXY_PASS</td><td>TODO</td></tr>
-<tr><td>EX_fasp_proxy_url</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>--proxy</td><td>Specify the address of the Aspera high-speed proxy server</td></tr>
-<tr><td>EX_http_proxy_url</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>-x</td><td>Specify the proxy server address used by HTTP Fallback</td></tr>
-<tr><td>EX_ascp_args</td><td>-</td><td>array</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>same</td><td>Add command line arguments to ascp</td></tr>
-<tr><td>EX_http_transfer_jpeg</td><td>0</td><td>integer</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>-j</td><td>HTTP transfers as JPEG file</td></tr>
-<tr><td>EX_license_text</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>LICENSE</td><td>license file text</td></tr>
-<tr><td>EX_file_list</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>--file-list</td><td>source file list</td></tr>
-<tr><td>EX_file_pair_list</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>--file-pair-list</td><td>source file pair list</td></tr>
-<tr><td>EX_multi_session_part</td><td>-</td><td>string</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>-C</td><td>part for multisession</td></tr>
-<tr><td>EX_no_read</td><td>-</td><td>-</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>--no-read</td><td>no read source</td></tr>
-<tr><td>EX_no_write</td><td>-</td><td>-</td><td class="yes">Y</td><td class="no">N</td><td class="no">N</td><td>--no-write</td><td>no write estination</td></tr>
-</table>
-</body>
-</html>
-