BUG: SSL Data doesn't work over SOCKS 4 Proxy

junq316 · 07-28-2010, 09:29 PM

In FlashFXP 3.6.0.1240, when using a Socks 4 Proxy to connect to an SSL enabled Server, Secure Directory Listing works fine:

Code:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,16,1)
[R] Opening data connection via Proxy
[R] LIST -al
[R] Connected. Negotiating TLSv1 session..
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] TLSv1 negotiation successful...
[R] TLSv1 encrypted session using cipher DHE-DSS-AES256-SHA (256 bits)
[R] List Complete: 548 bytes in 0.67 seconds (0.8 KB/s)

Trying the very same server, with exactly same options (imported from FlashFXP 3.6.0.1240 through tools->backup) I get an SSL Error:

Code:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,16,144)
[R] Opening data connection via Proxy
[R] LIST -al
[R] Connected. Negotiating TLSv1 session
[R] error:1408F044:SSL routines:SSL3_GET_RECORD:internal error
[R] Failed TLSv1 negotiation, disconnected
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] 435 Failed TLS negotiation on data channel (using SSL_accept()), disconnected: Success.
[R] List Error

Connecting without Proxy to verify the Issue appears to be within the Proxy Implementation:

Code:

[R] PWD
[R] 257 "/" is current directory.
[R] TYPE A
[R] 200 Type set to A.
[R] PROT P
[R] 200 Protection set to Private
[R] PASV
[R] 227 Entering Passive Mode (*,*,*,*,15,247)
[R] Opening data connection IP: *,*,*,* PORT: 4087
[R] LIST -al
[R] Connected. Negotiating TLSv1 session
[R] 150 Opening ASCII mode data connection for directory listing using SSL/TLS.
[R] TLSv1 negotiation successful...
[R] TLSv1 encrypted session using cipher DHE-DSS-AES256-SHA (256 bits)
[R] List Complete: 548 bytes in 0.62 seconds (0.9 KB/s)

The proxy server used for those tests is danted: http://www.inet.no/dante/