[source-sftp-bulk] Support passphrase-protected private keys
- 主要語言
- Python
- 星號
- 22.1k
- 分支
- 5.4k
- 平均合併
- 5 小時
- 30 天內合併 PR
- 671
描述
> 🤖 *This issue was generated by an AI Agent.*
## What's missing
Private keys encrypted with a passphrase cannot be used — there is no field to supply the passphrase and no code path to decrypt the key.
## Verified on `master`
`passphrase` does not appear anywhere in the `source_sftp_bulk` package. `client.py` loads keys via `key_class.from_private_key(io.StringIO(private_key))` with no password argument.
Note that non-RSA key *types* are supported (RSA, Ed25519, ECDSA, DSS — `client.py` lines 20-22, added in 1.9.1 via #75967). That is a different feature from unlocking an encrypted key.
## Origin
Closed as stale: #71309 (@marcos-t21), reviewed 2026-01-20 with no author response.
Filed to keep a record of the gap. The PR was closed for inactivity, not on merit — credit to the original contributor if this is picked up.
---
**Internal Tracking:** https://github.com/airbytehq/oncall/issues/13175
貢獻指南
研究方向
Start in the source_sftp_bulk package's client.py at the key_class.from_private_key call, and trace how private-key configuration reaches it. Done means a passphrase can be supplied to load encrypted private keys while preserving support for the listed non-RSA key types.
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- python
- 領域
- backend, security
- Issue 類型
- 功能
- 難度
- 3/5
- 預估耗時
- 1-2 天
- 活躍度
- 冷清
- 描述清晰度
- 基本清楚
- 新手友好度
- 68/100