Option to not use CPSV during FXP transfers (with Implicit SSL on both sites)

[tonyparker]

Would it be possible to fix up FlashFXP so that option in the "SSL" tab of the quick connect window that says:

SSL Site to Site Transfers (not supported by all servers)

Also applies to Implicit SSL connections?

At the moment, FlashFXP only tries CPSV regardless of what this checkbox is set at, and it would be good to change this

There are FTP servers out there that allow implicit SSL connections, but can be configured so that FXP transfers are not included in these implicit SSL restrictions.

I imagine this would help fix up the compatibility issues with ioFTPD servers (and other ones as well I guess) that operate under Implicit SSL?


Thanks!

Tony

[bigstar]

There are FTP servers out there that allow implicit SSL connections, but can be configured so that FXP transfers are not included in these implicit SSL restrictions.

How exactly does this work? Does the client need to send any special information or is everything handled on the server side? When Implicit SSL is used PROT C isn't, I've never seen an Implicit SSL FTP server that allowed PROT C on data connections.

[tonyparker]

[R] Connecting to test -> IP=x.x.x.x PORT=xxxxx
[R] Connected to test
[R] Connected. Negotiating SSL session..
[R] SSL negotiation successful...
[R] SSL encrypted session using cipher RC4-MD5 (128 bits)
[R] 220 FTP Server ready.
[R] PBSZ 0
[R] 200 PBSZ 0 successful.
[R] USER test
[R] 331 Password required for test.
[R] PASS (hidden)
[R] 230 User test logged in.
[R] SYST
[R] 215 UNIX Type: L8
[R] FEAT
[R] 500 'FEAT': Command not understood
[R] REST 100
[R] 350 Restarting at 100. Send STORE or RETRIEVE to initiate transfer.
[R] REST 0
[R] 350 Restarting at 0. Send STORE or RETRIEVE to initiate transfer.
[R] CWD /
[R] 250 CWD command successful.
[R] PWD
[R] 257 "/" is current directory.
[R] PROT C
[R] 200 Protection set to: Clear.
[R] PROT V
[R] 504 PROT V unsupported.



This was a quick test done with with ioFTPD. As you can see, PROT C is allowed during this Implicit SSL session. To prove that the server isn't just accepting any old random garbage, PROT V doesn't work because it isn't a valid mode.


Thanks for the quick reply bigstar! I was looking for an FTP client which supported this mode in particular, and I think lftp (for linux) allows PROT C transfers during Implicit SSL negotiations from what I've read.

[tonyparker]

To prove it works with 2 ioFTPD servers with Implicit SSL encryption enabled, I manually setup a transfer as follows:

[L] PROT C
[L] 200 Protection set to: Clear.
[R] PROT C
[R] 200 Protection set to: Clear.
[L] PASV
[L] 227 Entering Passive Mode (x,x,x,x,y,z)
[R] PORT x,x,x,x,y,z
[R] 200 PORT command successful.
[R] STOR xxxxxxxx.xxx
[R] 150 Opening ASCII mode data connection for xxxxxxxx.xxx.
[L] RETR xxxxxxxx.xxx
[L] 150 Opening BINARY mode data connection for xxxxxxxx.xxx.
[R] 226 Transfer complete.
[L] 226 Transfer complete.


I verified afterwards that the file did infact transfer properly.

[Shark]

bigstar, I remember when the suggestions/requests were simple

Do you ?

[NathanO]

You attract the right type of customers that help make FlashFXP the best.

It's a very good sign !

You can do it Bigstar (and team) !