[ 
https://issues.apache.org/jira/browse/VFS-412?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13491564#comment-13491564
 ] 

Jose Juan Montiel commented on VFS-412:
---------------------------------------

Hi, i needed PROT setting because a test against VSFTPS with mode "explicit"  
enabled, becaus that command was required

Here the snipet of config file for VSFTPS server.

#
# Configuracion SSL
#
# Habilita el soporte de TLS/SSL
ssl_enable=YES

# Obliga a utilizar TLS/SSL para todas las operaciones
force_local_data_ssl=YES
force_local_logins_ssl=YES

# Se prefiere TLSv1 sobre SSLv2 y SSLv3
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO

# Solo para version 2.3.2
require_ssl_reuse=false

Acording other server filezilla (http://trac.filezilla-project.org/ticket/2581) 
maybe the mode explicit/implicit matter.. but on the other hand, i open this 
"jira" to add functionality (pass PROT to the client)... you talk about to pass 
another comamnd PBSZ (like this example 
http://www.kochnielsen.dk/kurt/blog/?p=162)...

For me only need the of PROT, but if Gary is going to committed to VFS 
2.1-SNAPSHOT ;) i don't mind to add support to PBSZ in the same way...
                
> [FTPS] Support to send execPROT("P")
> ------------------------------------
>
>                 Key: VFS-412
>                 URL: https://issues.apache.org/jira/browse/VFS-412
>             Project: Commons VFS
>          Issue Type: Improvement
>            Reporter: Jose Juan Montiel
>            Priority: Minor
>              Labels: patch
>         Attachments: patch_412.txt, patch_exexprot.txt
>
>   Original Estimate: 1h
>  Remaining Estimate: 1h
>
> The layer over FTPSClient can't permit to send a client.execPROT("P") and 
> this make in FTPS explicit (with vsFTPd 2.0.7) make an error:
> SSL version: TLSv1/SSLv3, SSL cipher: DES-CBC3-SHA, not reused, no cert
> 522 Data connections must be encrypted.
> The patch offer via FtpsFileSystemConfigBuilder the option to set execPROT 
> like do with setPassiveMode.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to