80 |
Whether or not the API is better to libssh2 is debatable. This comparison looks at more objective criteria.
81 |
Portability
82 |
phpseclib is designed to be ultra-portable, even to the point of working on PHP4. Not a single extension is required, either (although if they're available they'll be used, for speed).
83 |
libssh2, in contrast... if you're on a shared host that doesn't have it installed (and most don't) you're S.O.L. And even if your server is running on a dedicated box it's still one extra step you have to do to install it. As if migrating to a new server wasn't enough of a challenge do you really want to compound the challenge by adding an additional server dependency like libssh2?
84 |
Speed
85 |
The following table shows how long, in seconds, it took to transfer a 1mb file via phpseclib and libssh2 to localhost and to a remote host.
86 |
87 |
88 |
89 | | Upload |
90 | remote host |
91 | libssh2 |
92 | 13.0037 |
93 |
94 |
95 | | phpseclib |
96 | 11.1086 |
97 |
98 |
99 | | localhost |
100 | libssh2 |
101 | 1.1250 |
102 |
103 |
104 | | phpseclib |
105 | 0.3380 |
106 |
107 |
108 | | Download |
109 | remote host |
110 | libssh2 |
111 | 4.8302 |
112 |
113 |
114 | | phpseclib |
115 | 2.4311 |
116 |
117 |
118 | | localhost |
119 | libssh2 |
120 | 0.7680 |
121 |
122 |
123 | | phpseclib |
124 | 0.4400 |
125 |
126 |
127 |
128 |
This test was conducted on an Intel Core i5-3320M CPU @ 2.6GHz running Windows 7 64-bit and PHP 5.4.19 and libssh 0.12 and the latest Git version of phpseclib with the gmp and mcrypt extensions installed.
129 |
The connection to the remote host was done with a 1MB upload speed. Here's the speedtest.net results:
130 |
131 |
The code used to conduct these tests is at upload.phps and download.phps.
132 |
The motivation for doing a separate test for remote hosts and localhosts was to compare the speeds with different bottlenecks. ie. with the remote host the bandwidth is the bottleneck. With localhost bandwidth is eliminated as a bottleneck. This shows that phpseclib performs better under a multitude of conditions.
133 |
Public Key Support
134 |
How you do it with libssh2:
135 |
<?php
136 | $ssh = ssh2_connect('domain.tld');
137 | ssh2_auth_pubkey_file($ssh, 'username', '/home/ubuntu/pubkey', '/home/ubuntu/privkey'/*, 'password'*/);
138 |
139 | $stream = ssh2_exec($ssh, 'ls -la');
140 | echo stream_get_contents($stream);
141 |
Both have to be of the right format too. If you didn't use ssh-keygen to generate your keys good luck in converting them.
142 |
<?php
143 | include('Net/SSH2.php');
144 | include('Crypt/RSA.php');
145 |
146 | $rsa = new Crypt_RSA();
147 | //$rsa->setPassword('password');
148 | $rsa->loadKey('...');
149 |
150 | $ssh = new Net_SSH2('domain.tld');
151 | $ssh->login('username', $rsa);
152 |
153 | echo $ssh->exec('ls -la');
154 |
Ignoring the API for the time being there are a few clear ways phpseclib comes out on top here:
155 |
156 | - phpseclib takes in strings - not file paths. If you want to do a file you can do file_get_contents.
157 | - phpseclib doesn't require a public key. Most private key formats have the public key embedded within them. And if they don't... phpseclib supports that too.
158 | - phpseclib can take in pretty much any standardized format, from PKCS#1 formatted keys, to PuTTY keys, to XML Signature keys
159 |
160 |
Diagnosing Problems
161 |
Why didn't top or sudo work? With phpseclib you can get logs. They look like this:
162 |
http://phpseclib.sourceforge.net/ssh/log.txt
163 |
You can also do print_r($ssh->getErrors()) or echo $ssh->getLastError()
164 |
Changing Directories
165 |
I don't see any cd or chdir functions at http://php.net/ssh2. phpseclib, however, has it - Net_SFTP::chdir(...)
166 |
Interactive Shell
167 |
Let's try to do sudo on the remote system.
168 |
With phpseclib: examples.html#sudo
169 |
With libssh2? I have no clue. My best guess (doesn't work):
170 |
<?php
171 | $ssh = ssh2_connect('domain.tld');
172 | ssh2_auth_password($ssh, 'username', 'password');
173 |
174 | $shell = ssh2_shell($ssh);
175 | echo fread($shell, 1024*1024);
176 | fwrite($shell, "sudo ls -la\n");
177 | $output = fread($shell, 1024*1024);
178 | echo $output;
179 | if (preg_match('#[pP]assword[^:]*:#', $output)) {
180 | fwrite($shell, "password\n");
181 | }
182 | echo fread($shell, 1024*1024);
183 |
It is additionally unclear how to get top working with libssh2 but it works perfectly fine with phpseclib: examples.html#top.
184 |