Green End SFTP Server

This is an experimental free SFTP server. It is currently still under development (so don't trust it with critical data). It should be possible to use it as a drop-in replacement for the widely-used OpenSSH SFTP server. It does not include an SSH server, but rather runs as a subsystem of one.

Announcements of new versions will be sent to sgo-software-announce, among other places.


Features beyond the v3 set depend on suitable client support. I have a list of clients some of which support the later protocol versions.


The latest release is sftpserver-0.2.2.tar.gz. Having unpacked it:

$ ./configure
$ make
$ sudo make install

See man gesftpserver for further instructions.

Signatures (including git tags) are made with 8A741BEF. To verify, download both archive and signature and use commands like this:

$ gpg2 --verify sftpserver-0.2.2.tar.gz.asc


You can clone a nightly snapshot from In more detail:

$ git clone
$ cd sftpserver
$ ./
$ ./configure
$ make runs Automake, Autoconf, etc; once it has been run once you can generally rely on the makefiles to remake anything that needs remaking.

Security Advisories

Date Advisory Versions Affected Fix version Summary
2016-12-04 #1 0.2.1 and earlier 0.2.2 Double free and null pointer dereference


Copyright © 2007, 2009-2011, 2014-2016 Richard Kettlewell

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA

RJK | Contents