Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NEW FEATURE: FTP SSLv2 connections #271

Open
davidrg opened this issue Aug 12, 2024 · 0 comments
Open

NEW FEATURE: FTP SSLv2 connections #271

davidrg opened this issue Aug 12, 2024 · 0 comments

Comments

@davidrg
Copy link
Owner

davidrg commented Aug 12, 2024

From the K95 bugs list:

K95 follows the specification for FTP AUTH SSL and FTP AUTH TLS and
does not support the antiquated SSLv2 protocol on FTP connections.
Unfortunately, not everyone else follows the specification. A new command

SET FTP BUG USE_SSL_V2 {ON, OFF}

has been added to allow SSLv2 to be used with servers that won't
negotiate SSLv3 or TLSv1. This is available in the next release.

The code to support this should all be present, but SSLv2 (and SSLv3) are no longer enabled by default in OpenSSL if they're even present at all. At a minimum, OpenSSL probably needs to be built with enable-ssl2 enable-ssl3 but if OpenSSL 3.x doesn't support these older protocols then we should document this feature as really being a custom build option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant