FTPS The Key on Right top screen is still open..

English support forum

Moderators: white, Hacker, petermad, Stefan2

Post Reply
Rob72
Junior Member
Junior Member
Posts: 9
Joined: 2016-07-13, 07:44 UTC

FTPS The Key on Right top screen is still open..

Post by *Rob72 »

I use NAS DS916 Synology DSM6.0 set FTP FTPS SFTP are ok
I use a registered certificate incl. domein name etc..

Total commander 8.51a
FTPS I Added libeay32.dll ssleay32.dll to the TC main directory.
FTPS is running fine by trust the fingerprint Ok.
On the Top TC Screen there is a key when press you get the certificated info. I accept the fingerprint so the certificate say OK..

The Key on the top screen shows it is still open. I don't understand. Should be close for this connection. (Man in the middle is not the case)

Can some body help me with the key to be closed?

Thx Rob72
Sob
Power Member
Power Member
Posts: 941
Joined: 2005-01-19, 17:33 UTC

Post by *Sob »

Create file wincmd.pem in same directory where you have your ini files (check Help->About Total Commander... if you're not sure about their location). It can be either empty or contain certificates of trusted CAs (one possible source is e.g. https://curl.haxx.se/ca/cacert.pem).

Older TC versions had sort of "relaxed" or "not exactly what you might expect" approach to certificate verification when this file does not exist. Latest TC9 beta already handles verification much better, because it gets trusted CAs from Windows and does full verification by default.
Rob72
Junior Member
Junior Member
Posts: 9
Joined: 2016-07-13, 07:44 UTC

Post by *Rob72 »

>Greate file wincmd.pem in same directory where you have your ini files.
I did and it is working..

The file is empty even after make a FTPS connection, still empty.
I put in wincmd.pem my public key of my existing certificate.
Don't make any difference.
Look to me TC is NOT checking this certificate.

Any way the key is closed, fine

Thx for your advice, greet..

Rob72
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48083
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Once you have connected, there should be a locker icon in the upper left. Click on it, and choose to always trust that certificate. Afterwards, you shouldn't be warned any more until the certificate changes.
Author of Total Commander
https://www.ghisler.com
Rob72
Junior Member
Junior Member
Posts: 9
Joined: 2016-07-13, 07:44 UTC

Post by *Rob72 »

>you shouldn't be warned any more until the certificate changes.
OK, Clear to me...

Thanks for your advice...

Rob72
Post Reply