Library phpseclib should be upgraded - currently a 2010 version is bundled with M2

[sebastian-enz]

See here: https://github.com/magento/magento2/blob/develop/lib/internal/phpseclib/Net/SFTP.php

" $Id: SFTP.php,v 1.21 2010/04/09 02:31:34 terrafrost Exp $ "

Phpseclib is still being actively maintained, even on Github with Composer support. Maybe it should be added via composer to Magento, and not put statically into the "lib" folder?

We are using Net_SFTP in some projects and the 2010 version that is currently bundled with Magento 2 (and Magento 1) is very buggy. They made some huge improvements during the last few years and even added SFTPv2 support.

See: https://github.com/phpseclib/phpseclib

[vpelipenko]

@ikk0, thanks for pointing that. It is known issue and it is in progress now. We are going to update this component to the latest version and get it using composer.

[vpelipenko]

Internal ticket: MAGETWO-37817

[orlangur]

This suggestion is also known as #394.

[vpelipenko]

yes, it is the same request.

[vpelipenko]

Phpseclib was removed from source code, added to composer.json and now we work with 0.3.10 version.

[vpelipenko]

Closed as duplicate.