commons-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jose Juan Montiel (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (VFS-412) [FTPS] Support to send execPROT("P")
Date Tue, 06 Nov 2012 16:02:12 GMT

    [ https://issues.apache.org/jira/browse/VFS-412?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13491564#comment-13491564
] 

Jose Juan Montiel commented on VFS-412:
---------------------------------------

Hi, i needed PROT setting because a test against VSFTPS with mode "explicit"  enabled, becaus
that command was required

Here the snipet of config file for VSFTPS server.

#
# Configuracion SSL
#
# Habilita el soporte de TLS/SSL
ssl_enable=YES

# Obliga a utilizar TLS/SSL para todas las operaciones
force_local_data_ssl=YES
force_local_logins_ssl=YES

# Se prefiere TLSv1 sobre SSLv2 y SSLv3
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO

# Solo para version 2.3.2
require_ssl_reuse=false

Acording other server filezilla (http://trac.filezilla-project.org/ticket/2581) maybe the
mode explicit/implicit matter.. but on the other hand, i open this "jira" to add functionality
(pass PROT to the client)... you talk about to pass another comamnd PBSZ (like this example
http://www.kochnielsen.dk/kurt/blog/?p=162)...

For me only need the of PROT, but if Gary is going to committed to VFS 2.1-SNAPSHOT ;) i don't
mind to add support to PBSZ in the same way...
                
> [FTPS] Support to send execPROT("P")
> ------------------------------------
>
>                 Key: VFS-412
>                 URL: https://issues.apache.org/jira/browse/VFS-412
>             Project: Commons VFS
>          Issue Type: Improvement
>            Reporter: Jose Juan Montiel
>            Priority: Minor
>              Labels: patch
>         Attachments: patch_412.txt, patch_exexprot.txt
>
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> The layer over FTPSClient can't permit to send a client.execPROT("P") and this make in
FTPS explicit (with vsFTPd 2.0.7) make an error:
> SSL version: TLSv1/SSLv3, SSL cipher: DES-CBC3-SHA, not reused, no cert
> 522 Data connections must be encrypted.
> The patch offer via FtpsFileSystemConfigBuilder the option to set execPROT like do with
setPassiveMode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message