net-sftp 4.0.2 → 4.1.1

data/lib/net/sftp/protocol/01/attributes.rb

@@ -1,4 +1,5 @@
 require 'net/ssh/buffer'
+require 'net/sftp/protocol/bounded_read'
 
 module Net; module SFTP; module Protocol; module V01
 
@@ -39,6 +40,8 @@ module Net; module SFTP; module Protocol; module V01
     T_BLOCK_DEVICE = 8
     T_FIFO         = 9
 
+    extend Net::SFTP::Protocol::BoundedRead
+
     class <<self
       # Returns the array of attribute meta-data that defines the structure of
       # the attributes packet as described by this version of the protocol.
@@ -106,7 +109,8 @@ module Net; module SFTP; module Protocol; module V01
         # Parse the hash of extended data from the buffer.
         def parse_extended(buffer)
           extended = Hash.new
-          buffer.read_long.times do
+          # Each pair is two strings, at least 8 bytes.
+          read_bounded_count!(buffer, 8, "extended attribute").times do
             extended[buffer.read_string] = buffer.read_string
           end
           extended

data/lib/net/sftp/protocol/01/base.rb

@@ -54,7 +54,8 @@ module Net; module SFTP; module Protocol; module V01
     def parse_name_packet(packet)
       names = []
 
-      packet.read_long.times do
+      # Each entry is two strings and the attribute flags, at least 12 bytes.
+      read_bounded_count!(packet, 12, "name").times do
         filename = packet.read_string
         longname = packet.read_string
         attrs    = attribute_factory.from_buffer(packet)

data/lib/net/sftp/protocol/04/attributes.rb

@@ -69,7 +69,8 @@ module Net; module SFTP; module Protocol; module V04
         def parse_acl(buffer)
           acl_buf = Net::SSH::Buffer.new(buffer.read_string)
           acl = []
-          acl_buf.read_long.times do
+          # Each entry is three longs and a string, at least 16 bytes.
+          read_bounded_count!(acl_buf, 16, "ACL").times do
             acl << ACL.new(acl_buf.read_long, acl_buf.read_long, acl_buf.read_long, acl_buf.read_string)
           end
           acl

data/lib/net/sftp/protocol/04/base.rb

@@ -28,7 +28,8 @@ module Net; module SFTP; module Protocol; module V04
     def parse_name_packet(packet)
       names = []
 
-      packet.read_long.times do
+      # Each entry is a string, the attribute flags and the type, at least 9 bytes.
+      read_bounded_count!(packet, 9, "name").times do
         filename = packet.read_string
         attrs    = attribute_factory.from_buffer(packet)
         names   << name_factory.new(filename, attrs)

data/lib/net/sftp/protocol/base.rb

@@ -1,5 +1,6 @@
 require 'net/ssh/loggable'
 require 'net/sftp/constants'
+require 'net/sftp/protocol/bounded_read'
 
 module Net; module SFTP; module Protocol
 
@@ -10,6 +11,7 @@ module Net; module SFTP; module Protocol
     include Net::SSH::Loggable
     include Net::SFTP::Constants
     include Net::SFTP::Constants::PacketTypes
+    include Net::SFTP::Protocol::BoundedRead
 
     # The SFTP session object that acts as client to this protocol instance
     attr_reader :session

data/lib/net/sftp/protocol/bounded_read.rb

@@ -0,0 +1,25 @@
+require 'net/sftp/errors'
+
+module Net; module SFTP; module Protocol
+
+  # Several SFTP structures are a 32-bit item count followed by that many
+  # items. Net::SSH::Buffer returns nil instead of raising when a read runs
+  # past the end of the data, so a loop over an unchecked count from the
+  # server keeps allocating long after the packet is exhausted.
+  module BoundedRead
+    # Reads an item count from +buffer+ and raises Net::SFTP::Exception if it
+    # is missing, or larger than the remaining bytes could hold given that
+    # each item takes at least +min_item_size+ bytes.
+    def read_bounded_count!(buffer, min_item_size, what)
+      count = buffer.read_long
+      raise Net::SFTP::Exception, "truncated packet: missing #{what} count" if count.nil?
+
+      if count > buffer.available / min_item_size
+        raise Net::SFTP::Exception, "server sent #{count} #{what} entries in only #{buffer.available} bytes"
+      end
+
+      count
+    end
+  end
+
+end; end; end

data/lib/net/sftp/session.rb

@@ -68,6 +68,10 @@ module Net; module SFTP
     # the server has not yet responded to will be represented here.
     attr_reader :pending_requests
 
+    # The extensions the server advertised in its FXP_VERSION packet, as a
+    # hash of name => data (e.g. "posix-rename@openssh.com" => "1").
+    attr_reader :extensions
+
     # Creates a new Net::SFTP instance atop the given Net::SSH connection.
     # This will return immediately, before the SFTP connection has been properly
     # initialized. Once the connection is ready, the given block will be called.
@@ -81,6 +85,7 @@ module Net; module SFTP
       @input      = Net::SSH::Buffer.new
       self.logger = session.logger
       @state      = :closed
+      @extensions = {}
       @pending_requests = {}
 
       connect(&block)
@@ -924,19 +929,27 @@ module Net; module SFTP
       # version negotiation, instantiating the appropriate Protocol instance
       # and invoking the callback given to #connect, if any.
       def do_version(packet)
+        # Negotiation happens once. A later FXP_VERSION would swap the protocol
+        # driver and drop every pending request.
+        unless state == :init
+          raise Net::SFTP::Exception, "unexpected FXP_VERSION packet while session is #{state}"
+        end
+
         debug { "negotiating sftp protocol version, mine is #{HIGHEST_PROTOCOL_VERSION_SUPPORTED}" }
 
         server_version = packet.read_long
         debug { "server reports sftp version #{server_version}" }
 
-        negotiated_version = [server_version, HIGHEST_PROTOCOL_VERSION_SUPPORTED].min
+        # Servers reply with their own version whatever we offered (OpenSSH
+        # always says 3), so cap at the version we offered as well.
+        negotiated_version = [server_version, @version, HIGHEST_PROTOCOL_VERSION_SUPPORTED].compact.min
         info { "negotiated version is #{negotiated_version}" }
 
-        extensions = {}
+        @extensions = {}
         until packet.eof?
           name = packet.read_string
           data = packet.read_string
-          extensions[name] = data
+          @extensions[name] = data
         end
 
         @protocol = Protocol.load(self, negotiated_version)

data/lib/net/sftp/version.rb

@@ -49,10 +49,10 @@ module Net
       MAJOR = 4
 
       # The minor component of this version of the Net::SFTP library
-      MINOR = 0
+      MINOR = 1
 
       # The tiny component of this version of the Net::SFTP library
-      TINY  = 2
+      TINY  = 1
 
       # The prerelease component of this version of the Net::SFTP library
       # nil allowed

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: net-sftp
 version: !ruby/object:Gem::Version
-  version: 4.0.2
+  version: 4.1.1
 platform: ruby
 authors:
 - Jamis Buck
 - Delano Mandelbaum
 - Miklós Fazekas
 autorequire:
-bindir: exe
+bindir: bin
 cert_chain:
 - |
   -----BEGIN CERTIFICATE-----
@@ -32,7 +32,7 @@ cert_chain:
   mMdUtmMoVbjbik3hqkY/18G03c3PoFNpL38VLKuyyROYz1DaCqOaRju3sbOoirD+
   piQTZDCWxeKuX0Iuxq02uxkYHfoGB6In0y3OOQ==
   -----END CERTIFICATE-----
-date: 2026-10-25 00:00:00.000000000 Z
+date: 2026-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: net-ssh
@@ -91,18 +91,9 @@ extra_rdoc_files:
 - LICENSE.txt
 - README.rdoc
 files:
-- ".github/pull_request_template.md"
-- ".github/workflows/changelog.yml"
-- ".github/workflows/ci.yml"
-- ".gitignore"
 - CHANGES.txt
-- CONTRIBUTING.md
-- Gemfile
 - LICENSE.txt
-- Manifest
 - README.rdoc
-- Rakefile
-- changelog.d/README.md
 - lib/net/sftp.rb
 - lib/net/sftp/constants.rb
 - lib/net/sftp/errors.rb
@@ -125,13 +116,11 @@ files:
 - lib/net/sftp/protocol/06/attributes.rb
 - lib/net/sftp/protocol/06/base.rb
 - lib/net/sftp/protocol/base.rb
+- lib/net/sftp/protocol/bounded_read.rb
 - lib/net/sftp/request.rb
 - lib/net/sftp/response.rb
 - lib/net/sftp/session.rb
 - lib/net/sftp/version.rb
-- net-sftp-public_cert.pem
-- net-sftp.gemspec
-- setup.rb
 homepage: https://github.com/net-ssh/net-sftp
 licenses:
 - MIT
@@ -144,7 +133,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data/.github/pull_request_template.md

@@ -1 +0,0 @@
-<!-- After opening the PR, add a changelog.d/<PR number>.<type>.txt fragment (none, change, security, breaking or breaking-security) instead of editing CHANGES.txt; see CONTRIBUTING.md#changelog. -->

data/.github/workflows/changelog.yml

@@ -1,18 +0,0 @@
-name: Changelog
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, labeled, unlabeled]
-
-permissions:
-  contents: read
-
-jobs:
-  changelog:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          # HEAD is the PR merged into the base branch; HEAD^1 is the base it was merged into.
-          fetch-depth: 2
-      - uses: net-ssh/changelogd@v1

data/.github/workflows/ci.yml

@@ -1,36 +0,0 @@
-name: CI
-on:
-  pull_request:
-  push: { branches: master }
-permissions:
-  contents: read
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby-version: ['2.6', '2.7', '3.0', '3.1', '3.2', '3.3', '3.4', '4.0', 'ruby-head', 'jruby', 'truffleruby']
-    continue-on-error: ${{ contains(fromJSON('["ruby-head", "jruby", "truffleruby"]'), matrix.ruby-version) }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby-version }}
-          bundler-cache: true
-      - name: Run Tests
-        run: bundle exec rake test
-  frozen-string-literal:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: '4.0'
-          bundler-cache: true
-      - name: Run Tests with frozen string literals
-        run: bundle exec rake test
-        env:
-          RUBYOPT: --enable-frozen-string-literal

data/.gitignore

@@ -1,7 +0,0 @@
-pkg
-doc
-coverage
-ri
-*.swp
-Gemfile.lock
-lib/net/sftp/version.rb.old

data/CONTRIBUTING.md

@@ -1,33 +0,0 @@
-# Contributing to net-sftp
-
-Run the tests with `bundle exec rake test`.
-
-## Changelog
-
-Don't edit `CHANGES.txt`. Instead, add a fragment file to `changelog.d/` in your PR; the release's version bump (`rake vbump:*`) moves all fragments into a new `=== <version>` section at the top of `CHANGES.txt` and deletes them.
-
-A fragment is named `<number>.<type>.txt`, where `<number>` is the PR number (so open the PR first, then add the fragment), and contains a single UTF-8 paragraph: the entry as it should read in `CHANGES.txt`, without the bullet or prefix. Lines are joined, so it can be wrapped. If it doesn't end with a reference list such as `[#106, #107]` or `[GHSA-xxxx-xxxx-xxxx]`, ` [#<number>]` is appended.
-
-| Type                | Written as                     | Use for                                                      |
-| ------------------- | ------------------------------ | ------------------------------------------------------------ |
-| `breaking-security` | `* BREAKING: Security: <text>` | an incompatible change made for security                     |
-| `breaking`          | `* BREAKING: <text>`           | an incompatible change                                       |
-| `security`          | `* Security: <text>`           | a security fix or hardening                                  |
-| `change`            | `* <text>`                     | any other user-visible fix or feature                        |
-| `none`              | nothing                        | PRs with no user-visible change (tests, CI, docs, refactors) |
-
-Examples:
-
-```sh
-rake "changelog:new[184,change,Fixed downloading files with multibyte names]"
-# changelog.d/184.change.txt -> * Fixed downloading files with multibyte names [#184]
-
-echo 'Refuse symlinks that point outside the download directory [GHSA-xxxx-xxxx-xxxx]' > changelog.d/185.security.txt
-touch changelog.d/186.none.txt
-```
-
-For several entries from one PR add a suffix: `184.change.txt`, `184.change.2.txt` (`changelog:new` picks the next free one).
-
-`rake changelog:check` validates the fragments and `rake changelog:preview` prints the section the next release would add. CI fails a PR that edits `CHANGES.txt` or doesn't add or modify a `changelog.d/<PR number>.<type>.txt` fragment, unless it only touches `changelog.d/` or a maintainer adds the `skip-changelog` label; Dependabot PRs are skipped.
-
-The full rules, including how a release orders the entries, are in the [changelogd README](https://github.com/net-ssh/changelogd#readme).

data/Gemfile

@@ -1,20 +0,0 @@
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in mygem.gemspec
-gemspec
-
-# TODO: add to gemspec
-gem "bundler", ">= 1.11"
-gem "rake", ">= 12.0"
-gem "rdoc"
-gem "logger" # no longer a default gem in Ruby 4.0+
-
-# git: rather than github:, which Bundler 1.x (the default on Ruby 2.6) expands to an unsupported git:// URL.
-gem "changelogd", git: "https://github.com/net-ssh/changelogd.git", tag: "v1", group: :development
-
-gem 'byebug', group: %i[development test] if !Gem.win_platform? && RUBY_ENGINE == "ruby"
-
-if ENV["CI"]
-  gem 'codecov', require: false, group: :test
-  gem 'simplecov', require: false, group: :test
-end

data/Manifest

@@ -1,55 +0,0 @@
-CHANGELOG.rdoc
-lib/net/sftp/constants.rb
-lib/net/sftp/errors.rb
-lib/net/sftp/operations/dir.rb
-lib/net/sftp/operations/download.rb
-lib/net/sftp/operations/file.rb
-lib/net/sftp/operations/file_factory.rb
-lib/net/sftp/operations/upload.rb
-lib/net/sftp/packet.rb
-lib/net/sftp/protocol/01/attributes.rb
-lib/net/sftp/protocol/01/base.rb
-lib/net/sftp/protocol/01/name.rb
-lib/net/sftp/protocol/02/base.rb
-lib/net/sftp/protocol/03/base.rb
-lib/net/sftp/protocol/04/attributes.rb
-lib/net/sftp/protocol/04/base.rb
-lib/net/sftp/protocol/04/name.rb
-lib/net/sftp/protocol/05/base.rb
-lib/net/sftp/protocol/06/attributes.rb
-lib/net/sftp/protocol/06/base.rb
-lib/net/sftp/protocol/base.rb
-lib/net/sftp/protocol.rb
-lib/net/sftp/request.rb
-lib/net/sftp/response.rb
-lib/net/sftp/session.rb
-lib/net/sftp/version.rb
-lib/net/sftp.rb
-Rakefile
-README.rdoc
-setup.rb
-test/common.rb
-test/protocol/01/test_attributes.rb
-test/protocol/01/test_base.rb
-test/protocol/01/test_name.rb
-test/protocol/02/test_base.rb
-test/protocol/03/test_base.rb
-test/protocol/04/test_attributes.rb
-test/protocol/04/test_base.rb
-test/protocol/04/test_name.rb
-test/protocol/05/test_base.rb
-test/protocol/06/test_attributes.rb
-test/protocol/06/test_base.rb
-test/protocol/test_base.rb
-test/test_all.rb
-test/test_dir.rb
-test/test_download.rb
-test/test_file.rb
-test/test_file_factory.rb
-test/test_packet.rb
-test/test_protocol.rb
-test/test_request.rb
-test/test_response.rb
-test/test_session.rb
-test/test_upload.rb
-Manifest

data/Rakefile

@@ -1,152 +0,0 @@
-require "rubygems"
-require "rake"
-require "rake/clean"
-require "rdoc/task"
-require "bundler/gem_tasks"
-
-desc "When releasing make sure NET_SSH_BUILDGEM_SIGNED is set"
-task :check_NET_SSH_BUILDGEM_SIGNED do
-  raise "NET_SSH_BUILDGEM_SIGNED should be set to release" unless ENV['NET_SSH_BUILDGEM_SIGNED']
-end
-
-Rake::Task[:release].enhance [:check_NET_SSH_BUILDGEM_SIGNED]
-Rake::Task[:release].prerequisites.unshift(:check_NET_SSH_BUILDGEM_SIGNED)
-
-task :default => ["build"]
-CLEAN.include [ 'pkg', 'rdoc' ]
-name = "net-sftp"
-
-require_relative "lib/net/sftp/version"
-version = Net::SFTP::Version::CURRENT
-
-begin
-  require "changelogd/rake"
-rescue LoadError
-  # A git gem isn't on the load path under plain `rake`, as the release workflow runs it; bundler/setup could clash with the running rake.
-  require "bundler"
-  $LOAD_PATH.unshift(*Bundler.definition.specs["changelogd"].flat_map(&:full_require_paths))
-  require "changelogd/rake"
-end
-Changelogd::RakeTasks.new(version_file: "lib/net/sftp/version.rb")
-
-namespace :cert do
-  desc "Update public cert from private - only run if public is expired"
-  task :update_public_when_expired do
-    require 'openssl'
-    require 'time'
-    raw = File.read "net-sftp-public_cert.pem"
-    certificate = OpenSSL::X509::Certificate.new raw
-    raise Exception, "Not yet expired: #{certificate.not_after}" unless certificate.not_after < Time.now
-    sh "gem cert --build netssh@solutious.com --days 1825 --private-key /mnt/gem/net-ssh-private_key.pem"
-    sh "mv gem-public_cert.pem net-sftp-public_cert.pem"
-    sh "gem cert --add net-sftp-public_cert.pem"
-  end
-end
-
-require 'rake/testtask'
-Rake::TestTask.new do |t|
-  t.libs = ["lib", "test"]
-end
-
-extra_files = %w[LICENSE.txt THANKS.txt CHANGES.txt ]
-RDoc::Task.new do |rdoc|
-  rdoc.rdoc_dir = "rdoc"
-  rdoc.title = "#{name} #{version}"
-  rdoc.generator = 'hanna' # gem install hanna-nouveau
-  rdoc.main = 'README.rdoc'
-  rdoc.rdoc_files.include("README*")
-  rdoc.rdoc_files.include("bin/*.rb")
-  rdoc.rdoc_files.include("lib/**/*.rb")
-  extra_files.each { |file|
-    rdoc.rdoc_files.include(file) if File.exist?(file)
-  }
-end
-
-def change_version(&block)
-  Rake::Task["changelog:check"].invoke
-  version_file = 'lib/net/sftp/version.rb'
-  require_relative version_file
-  pre = Net::SFTP::Version::PRE
-  tiny = Net::SFTP::Version::TINY
-  result = block[pre: pre, tiny: Net::SFTP::Version::TINY]
-  raise ArgumentError, "Version change logic should always return a pre" unless result.key?(:pre)
-
-  new_pre = result[:pre]
-  new_tiny = result[:tiny] || tiny
-  found = { pre: false, tiny: false }
-  File.open("#{version_file}.new", "w") do |f|
-    File.readlines(version_file).each do |line|
-      match =
-        if pre.nil?
-          /^(\s+PRE\s+=\s+)nil(\s*)$/.match(line)
-        else
-          /^(\s+PRE\s+=\s+")#{pre}("\s*)$/.match(line)
-        end
-      if match
-        prefix = match[1]
-        postfix = match[2]
-        prefix.delete_suffix!('"')
-        postfix.delete_prefix!('"')
-        new_line = "#{prefix}#{new_pre.inspect}#{postfix}"
-        puts "Changing:\n  - #{line}  + #{new_line}"
-        line = new_line
-        found[:pre] = true
-      end
-
-      if new_tiny != tiny
-        match = /^(\s+TINY\s+=\s+)#{tiny}(\s*)$/.match(line)
-        if match
-          prefix = match[1]
-          postfix = match[2]
-          new_line = "#{prefix}#{new_tiny}#{postfix}"
-          puts "Changing:\n  - #{line}  + #{new_line}"
-          line = new_line
-          found[:tiny] = true
-        end
-      end
-
-      f.write(line)
-    end
-    raise ArgumentError, "Cound not find line: PRE = \"#{pre}\" in #{version_file}" unless found[:pre]
-    raise ArgumentError, "Cound not find line: TINY = \"#{tiny}\" in #{version_file}" unless found[:tiny] || new_tiny == tiny
-  end
-
-  FileUtils.mv version_file, "#{version_file}.old"
-  FileUtils.mv "#{version_file}.new", version_file
-  Rake::Task["changelog:release"].invoke
-end
-
-namespace :vbump do
-  desc "Final release"
-  task :final do
-    change_version do |pre:, tiny:|
-      _ = tiny
-      if pre.nil?
-        { tiny: tiny + 1, pre: nil }
-      else
-        raise ArgumentError, "Unexpected pre: #{pre}" if pre.nil?
-
-        { pre: nil }
-      end
-    end
-  end
-
-  desc "Increment prerelease"
-  task :pre, [:type] do |_t, args|
-    change_version do |pre:, tiny:|
-      puts " PRE => #{pre.inspect}"
-      match = /^([a-z]+)(\d+)/.match(pre)
-      raise ArgumentError, "Unexpected pre: #{pre}" if match.nil? && args[:type].nil?
-
-      if match.nil? || (!args[:type].nil? && args[:type] != match[1])
-        if pre.nil?
-          { pre: "#{args[:type]}1", tiny: tiny + 1 }
-        else
-          { pre: "#{args[:type]}1" }
-        end
-      else
-        { pre: "#{match[1]}#{match[2].to_i + 1}" }
-      end
-    end
-  end
-end

data/changelog.d/README.md

@@ -1 +0,0 @@
-Changelog fragments: one `<PR number>.<type>.txt` file per user-visible change, assembled into `CHANGES.txt` when the version is bumped. See [CONTRIBUTING.md](../CONTRIBUTING.md#changelog).

data/net-sftp-public_cert.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDeDCCAmCgAwIBAgIBATANBgkqhkiG9w0BAQsFADBBMQ8wDQYDVQQDDAZuZXRz
-c2gxGTAXBgoJkiaJk/IsZAEZFglzb2x1dGlvdXMxEzARBgoJkiaJk/IsZAEZFgNj
-b20wHhcNMjYxMDIyMDk1NDI1WhcNMjcxMDIyMDk1NDI1WjBBMQ8wDQYDVQQDDAZu
-ZXRzc2gxGTAXBgoJkiaJk/IsZAEZFglzb2x1dGlvdXMxEzARBgoJkiaJk/IsZAEZ
-FgNjb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ4TbZ9H+qZ08
-pQfJhPJTHaDCyQvCsKTFrL5O9z3tllQ7B/zksMMM+qFBpNYu9HCcg4yBATacE/PB
-qVVyUrpr6lbH/XwoN5ljXm+bdCfmnjZvTCL2FTE6o+bcnaF0IsJyC0Q2B1fbWdXN
-6Off1ZWoUk6We2BIM1bn6QJLxBpGyYhvOPXsYoqSuzDf2SJDDsWFZ8kV5ON13Ohm
-JbBzn0oD8HF8FuYOewwsC0C1q4w7E5GtvHcQ5juweS7+RKsyDcVcVrLuNzoGRttS
-KP4yMn+TzaXijyjRg7gECfJr3TGASaA4bQsILFGG5dAWcwO4OMrZedR7SHj/o0Kf
-3gL7P0axAgMBAAGjezB5MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQW
-BBQF8qLA7Z4zg0SJGtUbv3eoQ8tjIzAfBgNVHREEGDAWgRRuZXRzc2hAc29sdXRp
-b3VzLmNvbTAfBgNVHRIEGDAWgRRuZXRzc2hAc29sdXRpb3VzLmNvbTANBgkqhkiG
-9w0BAQsFAAOCAQEAbVrRpiCFmHDMLNU+SCjpg43snWYksQOtejPPTEMdOc9cCmmv
-ctJbaPIySLUgzwFbQDZStDPbLJmIujh0fm5dHp/sDJpvPZ3Mm3FfzWQMJqzBx4uk
-OMx00yJK8VeFrwUViE3zO5raWvw85dUybp25pgaKGW4AA5mJ/2UHqYLc4lefKFKK
-9xFsyYSciMEKyAsUNSNTJzPKUo2vn7TNF/pS0ZL+h8Qkr0A0F0ncfj7uM1kOWjO0
-mMdUtmMoVbjbik3hqkY/18G03c3PoFNpL38VLKuyyROYz1DaCqOaRju3sbOoirD+
-piQTZDCWxeKuX0Iuxq02uxkYHfoGB6In0y3OOQ==
------END CERTIFICATE-----

data/net-sftp.gemspec

@@ -1,48 +0,0 @@
-require_relative 'lib/net/sftp/version'
-
-Gem::Specification.new do |spec|
-  spec.name          = "net-sftp"
-  spec.version       = Net::SFTP::Version::STRING
-  spec.authors       = ["Jamis Buck", "Delano Mandelbaum", "Mikl\u{f3}s Fazekas"]
-  spec.email         = ["net-ssh@solutious.com"]
-
-  if ENV['NET_SSH_BUILDGEM_SIGNED']
-    spec.cert_chain = ["net-sftp-public_cert.pem"]
-    spec.signing_key = "/mnt/gem/net-ssh-private_key.pem"
-  end
-
-  spec.summary       = %q{A pure Ruby implementation of the SFTP client protocol.}
-  spec.description   = %q{A pure Ruby implementation of the SFTP client protocol}
-  spec.homepage      = "https://github.com/net-ssh/net-sftp"
-  spec.license       = "MIT"
-  spec.required_rubygems_version = Gem::Requirement.new(">= 0") if spec.respond_to? :required_rubygems_version=
-
-  spec.extra_rdoc_files = [
-    "LICENSE.txt",
-    "README.rdoc"
-  ]
-
-  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
-  spec.bindir        = "exe"
-  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
-  spec.require_paths = ["lib"]
-
-  if spec.respond_to? :specification_version then
-    spec.specification_version = 3
-
-    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
-      spec.add_runtime_dependency(%q<net-ssh>, [">= 5.0.0", "< 9.0.0"])
-      spec.add_development_dependency(%q<minitest>, [">= 5"])
-      spec.add_development_dependency(%q<mocha>, [">= 0"])
-    else
-      spec.add_dependency(%q<net-ssh>, [">= 5.0.0", "< 9.0.0"])
-      spec.add_dependency(%q<minitest>, [">= 5"])
-      spec.add_dependency(%q<mocha>, [">= 0"])
-    end
-  else
-    spec.add_dependency(%q<net-ssh>, [">= 5.0.0", "< 9.0.0"])
-    spec.add_dependency(%q<minitest>, [">= 5"])
-    spec.add_dependency(%q<test-unit>, [">= 0"])
-    spec.add_dependency(%q<mocha>, [">= 0"])
-  end
-end