support for TSL or SSL

[chino]

Will flashfxp get support for TSL or SSL ..? alot of sites is using some form of crypt. and right now there are no other "server to server" clients other than linux who's supporting this. Would be great if flashfxp could get support for this.

--Chino--

[bigstar]

Yes.. well maybe.. see below.

[Rockj]

may I ask why it isent possible to build in SSL or something? Like he sayd - many sites now using protected ftp's. I whould lovly like it , since no other windows FXP client does it ;)

[Fusion]

FXP thru SSL isn't possible, as you, the 3rd party in an FXP connection, can't instruct either of the two remaining parties to initiate the SSL connection. Please go to the RFCs (http://www.ietf.org/rfc.html) and read up on the technology you're asking for.

[darkone]

I dont think they wanted FXP using TSL (SSL).. I bet they ment they would like to Upload/Download using it... this could be possible with a proxy, if flash had proper socks5 support... (I've written such proxy (socks5 compat, unix) for control channel.. but due limited implementation of socks5 protocol in flash I cannot ad d support for data channels) Downloadable through http://darkone.mglan.net/

[pepe]

CuteFTP Pro supports SSL .....

here u can find an example of configuration RaidenFTPd + IPWorks Secure Tunnel http://www.raidenftpd.com/kb/kb00000001.html

pepe

[Merceile]

fxp is possible with patches and tools (winsslwrap whatever)

But would me much cooler if flashfxp would support it native :)

[JensB]

ya native support would be sweet ...

But I found this nice page on how to setup an sslwrap ...

http://ariel.prosalg.no/ssl/

[pepe]

New version of SmartFTP will support SSL and it's free.

www.smartftp.com

[bigstar]

If someone happens to have a delphi interface to the SSL dll's which is compatible with an existing socket library, I will be more than happy to give it a try. Oh and I'll need an SSL capable ftp server.

[Fusion]

I have such an interface you might be able to use, bigstar.

[mikeyboy]

A little off topic, but does anyone know of a linux program similar in function to WinSSL that i could run on a remote computer and connect through? Something like an ftp bnc or proxy with ssl support. Thanks for any info.

[Shorty]

mikeyboy,

u can use psybnc. You could use ez bouncer, but since u want ssl support, gotta be psybnc.
url for psybnc is http://www.psychoid.lam3rz.de/

[mikeyboy]

I know of psybnc, but i thought it was for irc only? Please correct me if i'm wrong..I'm looking for SSL support for FTP like WinSSLWrap (which has both).

[martin]

www.stunnel.org is a SSL tunneling program, orginally for Linux but there's windows binaries there that works perfectly fine.
You simply set it up to listen to a port locally, and tunnel to a remote SSL machine (it could be a SSL IRC server or FTP or pretty much whatever), then connect to the configured port with your client (would be FlashFXP in this case then) and you got a SSL connection with the remote server :-) It's based upon OpenSSL.. For Windows SSL FTP servers, check out the Serv-U 4 beta (SSL is the big news for Serv-U 4). Good luck!

[mikeyboy]

Yeah, I know of stunnel, however as far as I know it will only allow you to set one server to connect to per instance. WinSSLWrap allows the client to dictate which server to connect to, like a proxy. Any such programs for *nix systems that do this?

[bigstar]

so you guys would rather use a proxy than have flashfxp directly support ssl? cos that's the impression i'm getting.

what I need is detailed reference material (not the RFC's I have them), delphi interface to the ssl dlls (I don't mean socket controls w/ ssl support), delphi source code examples.

[S3cur1ty]

http://www.nevrona.com/Indy/

try this one , it's also free

it's a windows socket / internet related component for delphi/kylix

[Linkster]

and here is a bit on ssl using indy

http://www.intelicom.si/forum/read.php?f=3&i=308&t=308

[bigstar]

I've already looked at Indy, I can't even get the SSL demo's to work. I tried v8 & 9.

[mutant]

First of all I must confirm that the use of TLS/SSL is increasing and that it's a pity FlashFXP does not support it (i hate cuteftp...).
You can bypass it using clients like stunnel or WinSSLWrap but that does not work well for me as I seem to have the same problem mikeyboy has : I need to go through a proxy that supports SSL, preferably a linux/unix based proxy that passes through the ftp commands at least forwarding them to a secure server such as glftpd-tls .
For non ssl servers I use psi's ftpbnc which unfortunately doesn't support ssl/tls. Does anyone have an alternative bnc or proxy in mind ? thanks

[lynlimz]

Sorry to add furthur, but SSL support would be amazingly good. I currently use a trial version of SecureFX which is, yes, expiring. And I need a good alternative. Not willing to purchase another when i just did for flashfxp.

[amkazak]

Have you tried OpenSSL? It's what Serv-U 4 seems to be using.

[bigstar]

everything related to openssl is done in C, I can't make heads or tails of it.

[S3cur1ty]

what about this DLL

STelSock Ver.0.3.4 Mar 4, 1999
STelSock is a 32bit Windows Sockets DLL that makes TELNET applications possible to communicate with SSL telnetd. STelSock encrypts/decrypts the data for TELNET applications. According to the setting, STelSock also makes FTP applications possible to communicate with SSL ftpd.


From : http://tama.gate.nec.co.jp/so/

[Fusion]

DLLs are fine, except they can't be compiled into the project. A VCL is preferrable, but to date I've yet to find any for SSL.

[bigstar]

Maybe I wasn't clear enough? what I need is a delphi header/interface to a ssl dll. Everything I've seen, is done in C. I don't understand C. It's greek to me.

Anything else is pretty much of no use to me.

[Sig Carson]

The first Windows FTP client that supports implicit SSL, FXP, and Clear Data Channel is going to make a killing. Everyone is waiting for this capability... I sure hope FlashFXP is the first (since it's the best FXP client ;-)

[Shorty]

Originally posted by Sig Carson
The first Windows FTP client that supports implicit SSL, FXP, and Clear Data Channel is going to make a killing. Everyone is waiting for this capability... I sure hope FlashFXP is the first (since it's the best FXP client ;-)

Actually, the new SmartFTP (build 0966.5 released today) supports both implicit and explicit.
Not sure if it's out to the public yet as it's an internal release.

Bad thing about SmartFTP is that it doesn't transfer .sfv files first like FlashFXP, so that makes SmartFTP pretty much useless for me.

I sure hope FlashFXP can support implicit/explicit SSL, so I won't need WinSSLWrapper set up to work with FlashFXP to connect to SSL protected (explicit) glftpd sites.

FlashFXP rules! Hope it'll catch up with the other FTPs that are already supporting SSL (CuteFTP, SmartFTP, and possibly others).

[Sig Carson]

Yes, SmartFTP does support SSL, however it doesn't support disabling SSL for the data channel. We need a FTP client that supports FXP and the "PROT C" command to disable SSL for the data channel.

[Sig Carson]

Is the FlashFXP team committed to adding SSL support?

Thanks

[Linkster]

We are doing everything we possibly can. The problem is the limited resources available for delphi pertaining to SSL. Again, if you have ANY suggestions, please let them be known

[Shark]

Please, to add to linksters comment, read the other posts in this thread to work out what bigstar needs to implement it. Thanks.

[S3cur1ty]

http://www.nsoftware.com/products.asp?part=ISD5-A

IP*Works! SSL Delphi Edition
Native Delphi VCLs for Borland Delphi. It features the same trustworthy components that come with other editions, available as native Delphi VCLs for real Delphi performance.

Components Included

FTPS - Transfer files to and from FTP servers. Easy, plug and play, extensible interface. SSL-enabled.

IPPortS - Generic TCP stream client component. Asynchronous architecture. SSL-enabled.

CertMgr - Provides certificate management capabilities for the Digital Certificates installed on the system.

[bigstar]

IP*Works isn't free and it *might* not work with the current design of FlashFXP. Although supporting SSL by any method is a long shot.

The IP*Works trial won't work because I have no way of directly tying it into my own socket library.

[Sig Carson]

Well... it looks like SmartFTP beat Flash to the punch.. it now has SSL with FXP support (clear data channel) in their 1.966.6 version.

Sig

[MxxCon]

yes, live's tough, let's all abonden FlashFXP and switch to smartftp just becuase it now support ssl:rolleyes:

[bigstar]

hmmm they beat us? There was never a race or a rush to support ssl, atlest not by me. I still have my doubts about even providing ssl support.

[Sig Carson]

FlashFXP is simply the best FXP client and many of us desparately need SSL support as many resources have begun to require it.

Maybe you could make a FlashFXP with SSL a higher price, and a small fee to upgrade from existing licenses? Could this cover your cost of development and licensing Delphi SSL code?

Thanks

[Shark]

Obviously some people want the SSL support, how ever I cannot agree with different priced versions of FFXP... Should be 1 version & 1 version only in my opinion...

My two cents

Dont want to be hippocritical (or however its spelt) ... but lets keep this post to what it was intended, to attempt to assist bigstar with what he needs to implement, or attempt to implement the SSL ...

[mutant]

bigstar, did I get your earlier post right or are you not really sure if you support SSL/TLS in general ? As if that is the case I don't expect to see an implementation soon and rather switch to another product instead of waiting for you to say 'flashfxp will not support it because I dont see it as an urgent new feature to implement.'
I can for sure understand your technical issues here looking for a good delphi module. But hey, if you want it to stay a state of the art ftp/fxp client you might want to think about getting help from someone who does understand C . I think many of us have made it clear that SSL/TLS community is gowing rapidly.

Just my 2 cents! Keep up the good work!

[S3cur1ty]

everyone knows that OpenSSL is free and it's written in C/C++ , maybe it's possible to use C++ to program a SSL client side tunnel and build an active-x , and then you can operate it in any kind of programming language such as delphi and You probably don't need to change your ftp code at all

[MrC]

PowerTCP SSL Tool

"Demonstrates a simple secure FTP client that can be used with the Secure FTP Server sample. VB 6, VB.NET, Delphi 6, VC 6 "

Supported Environments:

.NET Framework
Visual Basic
Visual C++
FoxPro
PowerBuilder
Delphi
C++ Builder
ASP
Office 97/2000