dartssh2 3.0.1

SSH and SFTP client written in pure Dart, aiming to be feature-rich as well as easy to use.

3.0.1 - 2026-08-16

• Fixed X11 forwarding by encoding and decoding the x11-req screen number as a uint32 instead of a string, as required by RFC 4254 §6.3 #194. Thanks @GT-610.
• Fixed SSHChannel.remoteChannelId returning the local channel id instead of the id assigned by the peer #196. Thanks @GT-610.
• Fixed SSHClient.run() and SSHClient.runWithResult() hanging forever when the stdout stream emitted an error, by routing stdout errors to the stdout completer #195. Thanks @GT-610.
• Fixed SSHClient.run() and SSHClient.runWithResult() raising an uncaught error, instead of throwing to the caller, when the stderr stream emitted an error while stdout was still open. Both streams are now awaited together, and the session is closed on failure so the SSH channel is no longer leaked #197.
• Switched SSH protocol randomness to a Random.secure() source and widened byte generation to the full 0x00-0xff range, covering key exchange cookies, ephemeral key exchange private values, and OpenSSH private key encryption seeds #193. Thanks @GT-610.
• Switched the check int of OpenSSH private keys written by SSHKeyPair.toPem() to the same secure random source, removing the last insecure Random() usage in the library #198.

3.0.0 - 2026-08-16

• BREAKING: Changed SSHClient.identities getter type from List<SSHKeyPair>? to List<SSHIdentity>? to support asynchronous external signers (OS agents, hardware tokens, smart cards, Secure Enclave, Android Keystore, and custom signers) #190. Constructor invocations passing List<SSHKeyPair> remain 100% source-compatible.
• BREAKING: Changed SSHClient.close() return type from void to Future<void> to allow awaiting complete socket and channel teardown.
• Added SSHIdentity abstraction, SSHRawHostKey, and SSHRawSignature with optional comment and shouldProbe properties #190.
• Added support for Public-Key Probing (RFC 4252 §7.8) with SSH_Message_Userauth_PK_Ok and SSHIdentity.shouldProbe to check server key acceptance before requesting hardware token / user interaction.
• Exported src/ssh_identity.dart and src/ssh_hostkey.dart in lib/dartssh2.dart.

2.22.5 - 2026-07-30

• Exported src/ssh_userauth.dart in lib/dartssh2.dart to expose SSHUserInfoRequest, SSHUserInfoPrompt, SSHAuthMethod, and SSHChangePasswordResponse #188. Thanks @vicajilau.

2.22.4 - 2026-07-27

• Advertised standard RFC 8731 key exchange name curve25519-sha256 alongside legacy [e-mail] [#187]. Thanks [@nickn17].

2.22.3 - 2026-07-20

• Fixed an SSH channel leak in SftpClient.close() by closing the underlying SSH channel and returning Future<void> to allow awaiting channel teardown [#186]. Thanks [@keinstn].

2.22.2 - 2026-07-15

• Added flush() to SSHSocket, SSHClient, and SSHChannel to allow force flushing of buffered outgoing data [#183]. Thanks @vicajilau.

2.22.1 - 2026-07-13

• Fixed a keepalive issue where overlapping pings could occur and caught errors during ping execution. Thanks @vicajilau.

2.22.0 - 2026-07-03

• Added optional handshakeTimeout and authTimeout to SSHClient to limit connection negotiation and user authentication times [#182]. Thanks @GT-610.

2.21.1 - 2026-07-02

• Fixed an SSHTransport busy-loop (100% CPU / ANR) that occurred when a partial packet remained in the read buffer [#179]. Thanks @vicajilau.

2.21.0 - 2026-07-01

• Added SSHSession.waitForExit({Duration? timeout}) to await remote process exit status with an optional timeout #176. Thanks @GT-610.
• Hardened SOCKS5 dynamic forwarding (half-close streaming, dialing guards, timeout cancellation, malformed UTF-8 decoding, and buffer limits) #175. Thanks @GT-610.
• Hardened SSH agent channel frame validation (rejecting empty or oversized frames) and fallback RSA signature type checks #175. Thanks @GT-610.
• Improved EC private key parsing with proper ASN.1 OID curve detection, public point derivation validation, and robust comments decoding #175. Thanks @GT-610.

2.20.0 - 2026-06-30

• BREAKING: Bumped the minimum Dart SDK constraint to 3.0.0 #23. Thanks @vicajilau.
• BREAKING: Declared OpenSSHKeyPair as a mixin class to comply with Dart 3.0 class modifier rules #23. Thanks @vicajilau.
• Offloaded all cryptographic key exchange (KEX) calculations to background isolates using Isolate.run on platforms that support it, preventing the Flutter main thread from blocking/freezing during connection #23. Thanks @vicajilau.
• Refactored internal key exchange isolate communication payloads (X25519, NIST Curves, DH) to use Dart 3.0 type-safe Records #23. Thanks @vicajilau.

2.19.0 - 2026-06-30

• Added tolerant HTTP-date parsing to accept all RFC 7231 §7.1.1.1 HTTP-date formats (IMF-fixdate, RFC 850, asctime) for HTTP response headers [#170]. Thanks @GT-610.
• Added chunked transfer-encoding decoding for HTTP response bodies according to RFC 7230 §4.1, improving interoperability with HTTP/1.1 servers [#171]. Thanks @GT-610.
• Added support for OpenSSH's [e-mail] SFTP extension to perform atomic renames with POSIX semantics (replace destination if it exists) when advertised by the server [#172]. Thanks @GT-610.
• Added SftpFile.downloadToRandomAccess to download a remote file directly into a dart:io RandomAccessFile using out-of-order pipelined writes, maximizing download performance on high-latency links [#173]. Thanks @GT-610.
• Fixed a connection drop bug during AEAD (AES-GCM) decryption caused by incorrect padding length validation offset calculation [#168]. Thanks [@nuclear06].

2.18.0 - 2026-05-18

• Fixed AES-GCM cipher encryption and decryption sequence number/nonce counter resetting during key exchanges #165. Thanks @vicajilau.
• BREAKING: SSHHostkeyVerifyHandler now receives an OpenSSH-style SHA256:<base64> host key fingerprint instead of the previous raw MD5 digest, so host key pinning code must be updated accordingly [#162]. Thanks [@thyssentishman].

2.17.1 - 2026-04-12

• Made SSHPem.decode accept CRLF (\r\n) line endings in addition to LF when parsing PEM content #157. Thanks @gkc.

2.17.0 - 2026-03-28

• Improved Web/WASM compatibility by updating SSHSocket conditional imports so web runtimes consistently use the web socket shim and avoid incorrect native socket selection #88. Thanks @vicajilau.
• Added local dynamic forwarding (SSHClient.forwardDynamic) with SOCKS5 NO AUTH + CONNECT, including configurable handshake/connect timeouts and connection limits.
• Added AES-GCM ([e-mail], [e-mail]) AEAD groundwork in transport and cipher negotiation; currently opt-in (not enabled by default yet). [e-mail] remains pending #26. Thanks @vicajilau.

2.16.0 - 2026-03-24

• BREAKING: Changed SSHChannelController.sendEnv() from void to Future<bool> to properly await environment variable setup responses and avoid race conditions with PTY requests #102. Thanks @itzhoujun and @vicajilau.
• Clarified shell stdio wiring for CLI-only usage and guarded example/shell.dart against missing local terminal handles (for example GUI-launched Windows .exe) #121. Thanks @bradmartin333 and @vicajilau.
• Added support for parsing legacy unencrypted EC PRIVATE KEY PEM format in SSHKeyPair.fromPem #109. Thanks @jooy2 and @vicajilau.
• Added SSHClient.runWithResult() to expose command output together with exitCode and exitSignal while keeping run() as a convenience API #99. Thanks @falrom and @vicajilau.
• Added non-breaking high-level SFTP download() / downloadTo() APIs and read pipeline tuning knobs (chunkSize, maxPendingRequests) for improved large-file throughput while preserving stream compatibility #124. Thanks @vicajilau.
• Made SFTP directory/file name parsing tolerant to malformed UTF-8 bytes to avoid FormatException on non-UTF-8 server filenames #95. Thanks @vicajilau.

2.15.0 - 2026-03-20

• Updated pointycastle dependency to ^4.0.0 #131. Thanks @vicajilau.
• Added foundational X11 forwarding support with session x11-req API, incoming x11 channel handling, and protocol tests #1. Thanks @vicajilau.
• Exposed SSH ident configuration from SSHClient #135. Thanks @Remulic and @vicajilau.
• Propagated the underlying exception in SSHAuthAbortError through reason for better diagnostics #133. Thanks @james-thorpe and @vicajilau.
• Accepted SSH-1.99-* server banners as SSH-2 compatible during version exchange and added regression tests #132. Thanks @james-thorpe and @vicajilau.
• Added SSH agent forwarding support ([e-mail]) with in-memory agent handling and RSA sign-request flag support #139. Thanks @Wackymax and @vicajilau.
• Normalized HTTP response line parsing in SSHHttpClientResponse to handle CRLF endings consistently and avoid trailing line-ending artifacts in parsed status/header fields #145. Thanks @vicajilau.
• Fixed SFTP packet encoding/decoding consistency: SftpInitPacket.decode now parses extension pairs correctly and SftpExtendedReplyPacket.encode now preserves raw payload bytes #145. Thanks @vicajilau.

2.14.0 - 2026-03-19

• Fixed SSH connections through bastion hosts where the target server sends its version string immediately upon connection (which is standard behavior per RFC 4253) #141. Thanks [@shihuili1218].
• Adds a new forwardLocalUnix() function, which is an equivalent of ssh -L localPort:remoteSocketPath #140. Thanks [@isegal].

2.13.0 - 2025-06-22

• docs: Update NoPorts naming [#115]. @XavierChanth.
• Add parameter disableHostkeyVerification #123. Thanks @alexander-irion.
• Add support for server initiated re-keying #125. Thanks @MarBazuz.
• Add support for new algorithms "mac-sha2-256-96", "hmac-sha2-512-96", "[e-mail]", "[e-mail]" #126 #127. Thanks @reinbeumer.

2.12.0 - 2025-02-08

• Fixed streams and channel not closing after receiving SSH_Message_Channel_Close [#116]. [@cbenhagen].
• Fixed lint issues.
• Added tests.
• Updated dependencies.

2.11.0 - 2024-11-19

• Fixed Type 'Uint8' not found issue.

2.10.0 - 2024-08-29

• Improved Readme.
• Bug fix in SftpFileWriter for #50, #71, #100.
• Added DartShell product #101.
• Fixed dynamic return on SftpFileOpenMode in | operator #80.
• DCM updated.
• Fixed warnings related with new DCM version.
• Dependencies updated.
• Fixed Flutter 3.24 issue.

2.9.1-pre - 2023-04-02

• Make the type of SSHForwardChannel.sink to StreamSink<List<int>> to match its super class.
• Added SSHHttpClient for easy http request forwarding.

2.9.0-pre - 2023-03-31

• Better handling of channel close.
• Make SSHForwardChannel implement SSHSocket for better interoperability.

2.8.2 - 2023-03-07

• Make SftpFileWriter implement Future<void> for backward compatibility.

2.8.1 - 2023-03-07

• Export SftpFileWriter

2.8.0 - 2023-03-06

• SftpFile.write now returns a SftpFileWriter that can be used to control the writing process.
• Support SftpClient.statvfs and SftpFile.statvfs.
• Support automatic keepalive.

2.7.3

• Update README.md
• Move cli into separate package.
• Properly handle chunk read error during stream read.

2.7.2+3

• Update README.md

2.7.2+2

• Update README.md

2.7.2+1

• Update README.md

2.7.2

• Upgrade pinenacl to 0.5.0.
• Fix bug in exporting openssh private key to pem, thanks @PIDAMI

2.7.1

• Upgrade rsa authentication algorithm to rsa-sha2-256.

2.7.0

• Support encrypted RSA format private key

2.6.1

• Allow username with @ in dartssh2 command #24

2.6.0

• Allow ignoring stdout or stderr in SSHClient.run.
• Add SSHAuthFailError and SSHAuthAbortError.
• Fix file type detection.
• Fix empty identity handling #21
• Add connection reset handing.
• Add more tests

2.5.0

• Fix js import path #18.
• Ignore remote data after channel closed.

2.4.4

• Fix lint errors

2.4.3

• Remove unused dependencies
• Fix lint errors

2.4.2

• Fix null check error in kill() #17
• More examples in README.md

2.4.1

• More examples in README.md
• Limit the maximum size of channel packets

2.4.0

• Support session stdin streaming and EOF

2.3.1

• Support ssh v2 when version string does not contain CR #14, thanks @Migarl

2.3.1-pre

• Add remoteVersion field to SSHClient

2.3.0-pre

• Add description field in SSHChannelOpenError

2.2.0

• Update README.md
• Support export keypair to PEM

2.1.0-pre

• Update README.md
• Support loading OpenSSH encrypted pem files.

2.0.0-pre

• Implements local port forwarding
• Implements remote port forwarding
• Implements SFTP client
• More supported algorithms
• Added dartsftp command

1.2.0-pre

• Rework login logic.
• dartssh command now supports login with public key.

1.1.4-pre

• dartssh command now supports terminal window resize.

1.1.3-pre

• Add --verbose option in dartssh command.

1.1.2-pre

• Fix typos.

1.1.1-pre

• Organize exports.

1.1.0-pre

• Dependency update.
• Sound null safety.
• Replace deprecated pedantic with package:lints
• Fix crash running vim by @linhanyu. #1

1.0.4+4

• Increase test coverage and documentation.

1.0.3+3

• Fix tunneled WebSocket issue.

1.0.2+2

• Add example/README.md

1.0.1+1

• Add SSHTunneledSocketImpl, SSHTunneledWebSocketImpl, and SSHTunneledBaseClient.

1.0.0+0

• Initial release.