Re: Demand that SSL must be used in Explicit SSL mode

[Niklas Gustavsson <ni...@protocol7.com>]

On Mon, Jun 23, 2008 at 1:58 PM, David Latorre Gallego
<dl...@acotelsa.com> wrote:
> I'm using FTPServer 1.0-M1-incubator with two listeners, one for implicit
> SSL and another one for explicit SSL. This is because not all the clients
> support both modes, but actually I want to force users to set up a SSL
> cannel even if they are using explicit SSL mode. Is there any way to obtain
> this with Mina FTPServer? By looking through the code I would say this is
> not a 'configurable' possibility.

Before I go into the remaining questions in your email, let me try to
understand your problem. Could you describe a bit further why you
would like clients that support explicit SSL to use a SSL socket even
before sending the AUTH command?

/niklas

Re: Demand that SSL must be used in Explicit SSL mode

[Niklas Gustavsson <ni...@protocol7.com>]

On Tue, Jun 24, 2008 at 9:20 AM, David Latorre Gallego
<dl...@acotelsa.com> wrote:
>
> Before I go into the remaining questions in your email, let me try to
> understand your problem. Could you describe a bit further why you
> would like clients that support explicit SSL to use a SSL socket even
> before sending the AUTH command?
>
> Uh no, I want my clients to start SSL mode with the AUTH command. But ,right
> now, they can access the ftpserver in plain text mode; my need is that they
> have to negotiate a ssl connection  in order to authenticate to the server
> (since I do not accept anynomous connections that should be enough for me).
>
> I don't know of any way to tell FTPServer that clear text is Not allowed,
> even if the listener is in explicit SSL mode and thus, the connection will
> be 'securized' with auth tls/ssl.

Ah yes, that makes perfect sense. And no, that is not currently
supported, but it should be. Please open a new JIRA issue describing
the feature. If you feel like providing a patch that will speed up the
implementation. Otherwise, I'll have a look at it later on.

> Sorry for my English, did I make myself clear now?

Very much so :-)

/niklas

RE: Demand that SSL must be used in Explicit SSL mode

[David Latorre Gallego <dl...@acotelsa.com>]

Before I go into the remaining questions in your email, let me try to
understand your problem. Could you describe a bit further why you
would like clients that support explicit SSL to use a SSL socket even
before sending the AUTH command?

/niklas


Uh no, I want my clients to start SSL mode with the AUTH command. But ,right
now, they can access the ftpserver in plain text mode; my need is that they
have to negotiate a ssl connection  in order to authenticate to the server
(since I do not accept anynomous connections that should be enough for me).

I don't know of any way to tell FTPServer that clear text is Not allowed,
even if the listener is in explicit SSL mode and thus, the connection will
be 'securized' with auth tls/ssl.

Sorry for my English, did I make myself clear now?

 
 

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 3152 (20080602) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com