X-Git-Url: https://git.distorted.org.uk/u/mdw/putty/blobdiff_plain/9d210cac4691e1c74644c9d0b6a25d3a36af648e..2ac3322ef9bc032ad942753a56696764aa0b0f74:/doc/pscp.but diff --git a/doc/pscp.but b/doc/pscp.but index 78a5afb9..5e8e59a6 100644 --- a/doc/pscp.but +++ b/doc/pscp.but @@ -7,8 +7,8 @@ \i{PSCP}, the PuTTY Secure Copy client, is a tool for transferring files securely between computers using an SSH connection. -If you have an SSH 2 server, you might prefer PSFTP (see \k{psftp}) -for interactive use. PSFTP does not in general work with SSH 1 +If you have an SSH-2 server, you might prefer PSFTP (see \k{psftp}) +for interactive use. PSFTP does not in general work with SSH-1 servers, however. \H{pscp-starting} Starting PSCP @@ -46,6 +46,8 @@ use PSCP: \c pscp [options] source [source...] [user@]host:target \c pscp [options] -ls [user@]host:filespec \c Options: +\c -V print version information and exit +\c -pgpfp print PGP key fingerprints and exit \c -p preserve file attributes \c -q quiet, don't show statistics \c -r copy directories recursively @@ -55,11 +57,11 @@ use PSCP: \c -l user connect with specified username \c -pw passw login with specified password \c -1 -2 force use of particular SSH protocol version +\c -4 -6 force use of IPv4 or IPv6 \c -C enable compression \c -i key private key file for authentication \c -batch disable all interactive prompts \c -unsafe allow server-side wildcards (DANGEROUS) -\c -V print version information \c -sftp force use of SFTP protocol \c -scp force use of SCP protocol @@ -95,10 +97,10 @@ direction, like this: However, in the second case (using a wildcard for multiple remote files) you may see a warning saying something like \q{warning: -remote host tried to write to a file called 'terminal.c' when we -requested a file called '*.c'. If this is a wildcard, consider -upgrading to SSH 2 or using the '-unsafe' option. Renaming of this -file has been disallowed}. +remote host tried to write to a file called \cq{terminal.c} when we +requested a file called \cq{*.c}. If this is a wildcard, consider +upgrading to SSH-2 or using the \cq{-unsafe} option. Renaming of +this file has been disallowed}. This is due to a fundamental insecurity in the old-style SCP protocol: the client sends the wildcard string (\c{*.c}) to the @@ -111,13 +113,13 @@ the wildcard matching rules are decided by the server, the client cannot reliably verify that the filenames sent back match the pattern. -PSCP will attempt to use the newer SFTP protocol (part of SSH 2) +PSCP will attempt to use the newer SFTP protocol (part of SSH-2) where possible, which does not suffer from this security flaw. If -you are talking to an SSH 2 server which supports SFTP, you will +you are talking to an SSH-2 server which supports SFTP, you will never see this warning. (You can force use of the SFTP protocol, if available, with \c{-sftp} - see \k{pscp-usage-options-backend}.) -If you really need to use a server-side wildcard with an SSH 1 +If you really need to use a server-side wildcard with an SSH-1 server, you can use the \c{-unsafe} command line option with PSCP: \c pscp -unsafe fred@example.com:source/*.c c:\source @@ -127,7 +129,11 @@ happen. However, you should be aware that by using this option you are giving the server the ability to write to \e{any} file in the target directory, so you should only use this option if you trust the server administrator not to be malicious (and not to let the -server machine be cracked by malicious people). +server machine be cracked by malicious people). Alternatively, do +any such download in a newly created empty directory. (Even in +\q{unsafe} mode, PSCP will still protect you against the server +trying to get out of that directory using pathnames including +\cq{..}.) \S2{pscp-usage-basics-user} \c{user} @@ -239,7 +245,7 @@ used, but also leads to interoperability issues such as with filename quoting (for instance, where filenames contain spaces), and also the security issue described in \k{pscp-usage-basics}. -The newer SFTP protocol, which is usually associated with SSH 2 +The newer SFTP protocol, which is usually associated with SSH-2 servers, is specified in a more platform independent way, and leaves issues such as wildcard syntax up to the client. (PuTTY's SFTP wildcard syntax is described in \k{psftp-wildcards}.) This makes it @@ -253,7 +259,7 @@ The \c{-scp} option forces PSCP to use the SCP protocol or quit. The \c{-sftp} option forces PSCP to use the SFTP protocol or quit. When this option is specified, PSCP looks harder for an SFTP server, -which may allow use of SFTP with SSH 1 depending on server setup. +which may allow use of SFTP with SSH-1 depending on server setup. \S{pscp-retval} Return value