Total Commander Forum Index Total Commander
Forum - Public Discussion and Support
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Information on how to use the ssl/tls feature for secure ftp
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next
 
Post new topic   Reply to topic    Total Commander Forum Index -> TC suggestions (English) Printable version
View previous topic :: View next topic  
Author Message
OutlawZ
Junior Member
Junior Member


Joined: 12 Nov 2006
Posts: 5

PostPosted: Sun Nov 12, 2006 6:40 pm    Post subject: Reply with quote

I forgot

One question.

Is it possible in the future not to use this rootcerts.pem file, only accept the cert offered by the ftp server? like in browsers when accessing https site-s.
Back to top
View user's profile Send private message
Clo
Moderator
Moderator


Joined: 02 Dec 2003
Posts: 5737
Location: Bordeaux, France

PostPosted: Sun Nov 12, 2006 6:59 pm    Post subject: G. & Author only know Reply with quote

2OutlawZ

Smile I don't know if this is planned and possible…

- I think you mean the public keys ? Maybe the Author has a clue about that.

BTW : During the private tests, I got also the too old DLLs, so I was aware… Wink

Mr. Green KR
Claude
Clo
_________________
#31505 Traducteur Français de TC French translator Aide en Français Tutoriels Français English Tutorials
Back to top
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
OutlawZ
Junior Member
Junior Member


Joined: 12 Nov 2006
Posts: 5

PostPosted: Mon Nov 13, 2006 1:57 pm    Post subject: Reply with quote

2Clo

I hope that's possible cuz i've seen it other ftp clients fith ftps support and i hope it's planned

Yepp i meant the public keys.

After my ftp server has ftps support and found a great ftps client in tc, now i'm trying to conf Apache 2.2 with mod_ssl and openssl on Win32 sys but it looks to be impossible always get error msgs, so i have now funny days, but i'm glad to get working the tc's ftps support.

Regards

OutlawZ
Back to top
View user's profile Send private message
Clo
Moderator
Moderator


Joined: 02 Dec 2003
Posts: 5737
Location: Bordeaux, France

PostPosted: Mon Nov 13, 2006 2:10 pm    Post subject: Useful ! Reply with quote

2OutlawZ

Smile Hello !
Quote:
…After my ftp server has ftps support and found a great ftps client in tc, now i'm trying to conf Apache 2.2 with mod_ssl and openssl on Win32 sys but it looks to be impossible always get error msgs, so i have now funny days, but i'm glad to get working the tc's ftps support.

• No doubt that such tests are useful for that new (ticklish) function in TC !
- So, please report the results here, they will be welcome ! Wink

• Have fun ! Very Happy

Mr. Green KR
Claude
Clo
_________________
#31505 Traducteur Français de TC French translator Aide en Français Tutoriels Français English Tutorials
Back to top
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
OutlawZ
Junior Member
Junior Member


Joined: 12 Nov 2006
Posts: 5

PostPosted: Tue Nov 14, 2006 11:13 am    Post subject: Reply with quote

2Clo

It's my pleasure to help to test some features.

Now i have some problems. inside of lan work fine implicit and explicit ssl too, but i'm behind a router and tried it from outside, and always get error after LIST command:
425 Cannot open data connection.
the server is in the routers DMZ and PASV mode not helped.

- DMZ forwards all queries to the defined ip, isn't?
- If i open a range of ports thats not too secure any way..

Any idea?

Regards

OutlawZ
Back to top
View user's profile Send private message
Phobophile
Junior Member
Junior Member


Joined: 01 Jun 2006
Posts: 8

PostPosted: Wed Apr 11, 2007 1:52 pm    Post subject: Thanks Ghisler Reply with quote

Hi,
Just wanted to say thank you (Ghisler) for this feature!
I've just tested it and it works great!
You're doing an excellent work with TC and I am very happy with this product!!

Very Happy

Dor Karter
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
ghisler(Author)
Site Admin
Site Admin


Joined: 04 Feb 2003
Posts: 27715
Location: Switzerland

PostPosted: Thu Apr 12, 2007 10:27 am    Post subject: Reply with quote

2OutlawZ
You cannot use active (PORT) mode with NAT routers. Why? The control connection is encrypted, so the router cannot see the PORT commands, and cannot convert them to the outside IP address!

One solution is to turn OFF the encryption of the control connection just after sending user name and password.

You can do this in RC1 by adding the command
CCC
to the "Send commands" field in the configuration of that ftp connection.
_________________
Author of Total Commander
http://www.ghisler.com
Back to top
View user's profile Send private message Send e-mail Visit poster's website
white
Power Member
Power Member


Joined: 19 Nov 2003
Posts: 1978
Location: Netherlands

PostPosted: Wed Feb 20, 2008 8:14 am    Post subject: Drag and drop support for https Reply with quote

Why can't I drop a https url with Shift key pressed onto the Total Commander window in order to download a file?
It is possible to do so with a http url. Why not with a https url? Is it not supported (yet)?
Back to top
View user's profile Send private message Send e-mail
ghisler(Author)
Site Admin
Site Admin


Joined: 04 Feb 2003
Posts: 27715
Location: Switzerland

PostPosted: Thu Feb 21, 2008 2:30 pm    Post subject: Reply with quote

Sorry, TC does not support HTTPS internally because of Swiss Crypto regulations. I'm using my own HTTP download code, so I cannot add HTTPS there. That's why in the WebDAV plugin I switched to the Internet* functions for HTTP transfers, because it also supports HTTPS. It has some other limitations, though, that's why I'm not using it for the HTTP downloads in TC, sorry.
_________________
Author of Total Commander
http://www.ghisler.com
Back to top
View user's profile Send private message Send e-mail Visit poster's website
muzzi
Junior Member
Junior Member


Joined: 26 Jun 2008
Posts: 2

PostPosted: Thu Jun 26, 2008 3:18 pm    Post subject: Reply with quote

Hey a real begginer here
i am stucked with this part:

"9. Issue the following two commands to convert to openssl format:

openssl pkcs7 -inform DER -in rootcerts.p7b -print_certs -out unfiltered.pem
openssl x509 -in unfiltered.pem -out rootcert.pem

10. Put the file rootcert.pem in the Total Commander directory"


Where should i put those commands? i have done all till this step!
What now?
Back to top
View user's profile Send private message
karlchen
Power Member
Power Member


Joined: 06 Feb 2003
Posts: 4208
Location: Germany

PostPosted: Thu Jun 26, 2008 3:35 pm    Post subject: Reply with quote

Hi, muzzi.

Going through Chrstian's instruction here, I am confident that
  • (9.) the two openssl commands need to be typed inside a cmd.exe window (Command Prompt) manually once
  • (10.) just tells you that the file rootcert.pem (cf. step (9) above, please) needs to be saved inside the Total Commander programme folder. You can even use T.C. itself to copy it there.

HTH,
Karl
Back to top
View user's profile Send private message Send e-mail
muzzi
Junior Member
Junior Member


Joined: 26 Jun 2008
Posts: 2

PostPosted: Thu Jun 26, 2008 4:16 pm    Post subject: Reply with quote

Ok but in command prompt i got this:
"openssl' is not recognizes as internal or external comand,...


Maybe i should rename it manually in tc Smile lol - just kidding
Back to top
View user's profile Send private message
karlchen
Power Member
Power Member


Joined: 06 Feb 2003
Posts: 4208
Location: Germany

PostPosted: Thu Jun 26, 2008 4:32 pm    Post subject: Reply with quote

Hi, muzzi.

Either open the cmd.exe window inside the folder where the openssl.exe has been stored.
Or you need to prefix the complete pathname to openssl.exe.

Karl
Back to top
View user's profile Send private message Send e-mail
Jagoda
New Member
New Member


Joined: 01 Sep 2008
Posts: 1
Location: Croatia

PostPosted: Mon Sep 01, 2008 12:14 pm    Post subject: Reply with quote

karlchen wrote:
Hi, muzzi.

Going through Chrstian's instruction, I am confident that
  • (9.) the two openssl commands need to be typed inside a cmd.exe window (Command Prompt) manually once
  • (10.) just tells you that the file rootcert.pem (cf. step (9) above, please) needs to be saved inside the Total Commander programme folder. You can even use T.C. itself to copy it there.

HTH,
Karl


Hello, everyone Smile.

I'm here for the first time and I show up because I have troubles with both old and new Total Commander, so I somehow got to this topic and read instructions that were supposed to help me.

I've followed written instructions and also stuck on the 9th, so I followed these quoted instructions, and had the same problem as muzzi. then when I opened cmd.exe in the same folder where openssl.exe is stored, and typed those 2 commands, I got : "The system cannot execute the specified program."

Now I don't know what to do. I WOULD "prefix the complete pathname to openssl.exe", but I don't know what it actually means Very Happy.

Would someone please be kind and explain it to me more precisely? Smile Karl or anyone? Smile
Back to top
View user's profile Send private message
TheWink
Junior Member
Junior Member


Joined: 03 Sep 2008
Posts: 2

PostPosted: Wed Sep 03, 2008 10:43 am    Post subject: Reply with quote

Why ftps support does not work with portable (run by starttc.exe) Total Commander ? I copied neccesary OpenSSL dlls to TC dir, but everytime I try to connect to my FTPS server I got popup saying OpenSSL libraries are not found.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Total Commander Forum Index -> TC suggestions (English) All times are GMT - 6 Hours
Goto page Previous  1, 2, 3, 4, 5, 6, 7  Next
Page 3 of 7

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Impressum: This site is maintained by Ghisler Software GmbH

Using phpBB © 2001-2005 phpBB Group