I know this is the wrong forum, but does anyone know if Apache Commons NET FTPSClient supports SSL session reuse? I can't see anything on the internet about it
On 8 December 2010 09:17, Niklas Gustavsson <[email protected]> wrote: > On Wed, Dec 8, 2010 at 9:50 AM, Aidan Diffey <[email protected]> > wrote: > > Ok. What does the require_ssl_reuse setting do anyhow? > > Från the vsftp documentation: > equire_ssl_reuse > If set to yes, all SSL data connections are required to exhibit SSL > session reuse (which proves that they know the same master secret as > the control channel). Although this is a secure default, it may break > many FTP clients, so you may want to disable it. For a discussion of > the consequences, see > http://scarybeastsecurity.blogspot.com/2009/02/vsftpd-210-released.html > (Added in v2.1.0). > Default: YES > > /niklas >
