
Product
Rust Support in Socket Is Now Generally Available
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.
http-ssh-agent
Advanced tools
Node.js http agent that allows you to send http requests over ssh.
npm install http-ssh-agent
Start a http server on a server that you have ssh access to. Since we will be accessing the server using ssh the server can bind to a port that is not open externally. On your local machine you just create the agent with some ssh options and pass it to a http module.
var http = require('http');
var agent = require('http-ssh-agent');
// per default the agent will authenticate using ~/.ssh/id_rsa as your private key
var ssh = agent('username@example.com');
http.get({
port: 8080, // assuming the remote server is running on port 8080
host: '127.0.0.1', // the host is resolved via ssh so 127.0.0.1 -> example.com
agent: ssh // simply pass the agent
}, function(response) {
response.pipe(process.stdout);
});
var request = require('request');
request('http://127.0.0.1:8080', {agent:ssh}).pipe(process.stdout);
Pass additional ssh options as the second argument. See ssh2 connection options for a full list of available options.
var ssh = agent('username@example.com', {
privateKey: 'path-to-private-key', // can also be a buffer,
password: 'ssh-password' // specify a password instead of a key
});
The agent will emit a verify event when it wants you to verify a host fingerprint.
You should validate that the fingerprint is correct and return an error if not.
ssh.on('verify', function(fingerprint, callback) {
console.log('Server fingerprint is', fingerprint);
callback(); // pass an error to indicate a bad fingerprint
});
If you do not want to do host validation simply do not listen for the verify event.
You can also choose to pass the hash to challange against as the verify option.
MIT
FAQs
Send requests to http servers over ssh
The npm package http-ssh-agent receives a total of 10 weekly downloads. As such, http-ssh-agent popularity was classified as not popular.
We found that http-ssh-agent demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.

Security News
Chrome 144 introduces the Temporal API, a modern approach to date and time handling designed to fix long-standing issues with JavaScript’s Date object.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.