Please remove ssh support from curl

Curl has support for eg sftp protocol via libssh2. This was re-enabled about a year ago in https://bugs.alpinelinux.org/issues/8578

However libssh2 is barely maintained, although it is a little better in recent weeks there will be ongoing security issues for some time and it is clearly understaffed, and there is unlikely to be substantial investment going forward.

There are tools shipped with ssh itself that work much better for ssh based use cases, and are morel likely to work as libssh2 has less good cipher support, may not understand newer known hosts formats etc.

So I would recommend removing the ssh support from curl again.

(from redmine: issue id 10222, created on 2019-04-09, closed on 2019-06-19)

• Relations:
  • relates #8578 (closed)
• Changesets:
  • Revision 05281825 by Leo Leo on 2019-04-29T20:56:46Z:

main/curl: disable SSH support via libssh2

fixes #10222

See: https://bugs.alpinelinux.org/issues/10222 for more info