BUG: SSL Data doesn't work over SOCKS 4 Proxy

[junq316]

In FlashFXP 3.6.0.1240, when using a Socks 4 Proxy to connect to an SSL enabled Server, Secure Directory Listing works fine:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,16,1)
[R] Opening data connection via Proxy
[R] LIST -al
[R] Connected. Negotiating TLSv1 session..
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] TLSv1 negotiation successful...
[R] TLSv1 encrypted session using cipher DHE-DSS-AES256-SHA (256 bits)
[R] List Complete: 548 bytes in 0.67 seconds (0.8 KB/s)

Trying the very same server, with exactly same options (imported from FlashFXP 3.6.0.1240 through tools->backup) I get an SSL Error:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,16,144)
[R] Opening data connection via Proxy
[R] LIST -al
[R] Connected. Negotiating TLSv1 session
[R] error:1408F044:SSL routines:SSL3_GET_RECORD:internal error
[R] Failed TLSv1 negotiation, disconnected
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] 435 Failed TLS negotiation on data channel (using SSL_accept()), disconnected: Success.
[R] List Error

Connecting without Proxy to verify the Issue appears to be within the Proxy Implementation:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,15,247)
[R] Opening data connection IP: *,*,*,* PORT: 4087
[R] LIST -al
[R] Connected. Negotiating TLSv1 session
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] TLSv1 negotiation successful...
[R] TLSv1 encrypted session using cipher DHE-DSS-AES256-SHA (256 bits)
[R] List Complete: 548 bytes in 0.62 seconds (0.9 KB/s)

The proxy server used for those tests is danted: http://www.inet.no/dante/

[MHJ]

hello,

i can confirm the same error using a socks5 proxy connection

found a workaround though:

replace the ssl libraries with older ones (OpenSSL v0.9.8i) till the issue is fixed.
i uploaded them here: <removed by admin>

at the bottom right corner there's a link that says "Save file to your PC:"
hit "click here" to download the file.

how to:

1) download the rar file
2) extract the ssl libraries
3) close flashfxp 4 (if open)
4) copy the ssl libraries to your flashfxp 4 directory replacing the old ones
5) done

if you start flashfxp 4 now you should see the following in the status window:

FlashFXP 4.0 (4.0.0 build 1458) [BETA] - PREVIEW RELEASE

WinSock 2.0 -- OpenSSL 0.9.8i 15 Sep 2008

[bigstar]

MHJ I appreciate your attempt to help other users with this issue but for the security and safety of our users we do not recommend users using 3rd party download links.

I am working on a fix for this issue and it will be posted very soon.

[MHJ]

Originally Posted by bigstar

MHJ I appreciate your attempt to help other users with this issue but for the security and safety of our users we do not recommend using 3rd party replacement files.

i understand that but in this case it's actually the flashfxp v3 ssl libraries, so not really "third party" so i didn't see a problem, but ok. thanks for the fix in advance.

[bigstar]

Sorry I meant to say 3rd party download links.

I have the problem fixed and I'm preparing the new build for release.

[bigstar]

The download link has been updated and the fix has been posted.

[junq316]

Originally Posted by bigstar

The download link has been updated and the fix has been posted.

Thanks bigstar for the quick fix!