Skip to content

Remove/Replace DSSKey references from Airflow #54079

Description

@amoghrajesh

Body

As seen from: #54078, which is a short term fix to workaround DSSKey

  1. Remove DSSKey references entirely in the codebase
  2. Bump minimum to paramiko 4.0+
  3. Provide migration guide for users with DSA keys
  4. Bump types-paramiko version that was limited in Restrict typing-paramiko to < 4 as we do with paramiko #54173

Migration that could be required:

Users would need to:
Generate other keys to be used in their connections (RSA, ECDSA, or Ed25519 keys) and update their Airflow connections to use those

Committer

  • I acknowledge that I am a maintainer/committer of the Apache Airflow project.

Activity

  1. added
    kind:metaHigh-level information important to the community
    on Aug 4, 2025
  2. joshuabvarghese commented on Aug 4, 2025

    @joshuabvarghese

    I am interested in doing it

  3. amoghrajesh commented on Aug 5, 2025

    @amoghrajesh
    ContributorAuthor

    Go for it @joshuabvarghese. Feel free to run through your approach on this if you aren't sure.
    cc @Lee-W since you expressed interest too.

  4. Lee-W commented on Aug 5, 2025

    @Lee-W
    Member

    @joshuabvarghese Feel free to reach out to me if you need PR review or clarification on this issue 🙂

  5. developer-guy commented on Aug 13, 2025

    @developer-guy

    are there any updates on this 👀

  6. Lee-W commented on Aug 13, 2025

    @Lee-W
    Member

    open PR WIP #54165

  7. pkhanpara commented on Aug 26, 2025

    @pkhanpara

    Until this merges the workaround is to use env var _PIP_ADDITIONAL_REQUIREMENTS: ${_PIP_ADDITIONAL_REQUIREMENTS:-apache-airflow-providers-ssh paramiko>=2.9.0,<4.0.0}

  8. rawwar commented on Oct 28, 2025

    @rawwar
    Contributor

    I'm picking this up

  9. eladkal commented on Apr 8, 2026

    @eladkal
    Contributor

    After #64299 we no longer have sshtunnel dependency so I think we can proceed with fixing this issue cc @rawwar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions