New SFTP plugin available now

[tom*de]

thanks, it corresponds to keyword in sftpplug.ini:

Code: Select all

filemod=660

added in every section of sftpplug.ini it changes the default to: rw to user, rw to group, no rights to other, fine

Where I can find help to sftpplug.ini - keywords:

• [Entry]
  server=
  user=
  codepage=
  scpfordata=
  pubkeyfile=
  privkeyfile=
  utf8=
  unixlinebreaks=
  fingerprint=
  proxynr=
  filemod=
  ...?

[tom*de]

Code: Select all

dirmod=770

works fine, too to prevent directory access for other. Any other keywords av.?

[sweetsour]

Hey,

When DLLs are missing, the SFTP Plugin error message only mentions that libeay32.dll and libssh2.dll are needed.

Please add zlib1.dll to that error message - will save people from a lot of headache.

[ghisler(Author)]

Unfortunately not all distributions of the dlls seem to require zlib1.dll...

[white]

Unfortunately not all distributions of the dlls seem to require zlib1.dll...

Which recent distribution of libssh2.dll does not require zlib1.dll?

[Gerby]

[EDIT 2014-03-19 17:00]The following statement occurs not to be right. zlib1.dll is actually needed. See my next post below.[/EDIT]

The one by Günter Knauf runs fine here without zlib:
http://curl.haxx.se/gknw.net/7.34.0/dist-w32/curl-7.34.0-devel-mingw32.zip
http://curl.haxx.se/gknw.net/7.34.0/dist-w64/curl-7.34.0-devel-mingw64.zip
(Not available as current version 7.35.0 yet.)

Actually it is the only distribution which works here (Win 7 x64). The one by Edward LoPinto isn't detected by Secure FTP plugin (additionally needed msvcr120.dll of course included).

Gerby

[white]

The one by Günter Knauf runs fine here without zlib:
http://curl.haxx.se/gknw.net/7.34.0/dist-w32/curl-7.34.0-devel-mingw32.zip

It doesn't here (Windows XP). I have the same version of curl lib. If I rename zlib1.dll and restart TC and try to connect to a server, I get the missing dlls error message.

Can you check with Process Explorer if zlib1.dll is loaded from some other place? (Run Total Commander, go to \\\Secure FTP, connect to a server, run Process Explorer, click on Find button, search for "zlib")

[white]

Actually it is the only distribution which works here (Win 7 x64). The one by Edward LoPinto isn't detected by Secure FTP plugin (additionally needed msvcr120.dll of course included).

The 32bit version by Edward LoPinto works fine here (Windows XP), even without zlib1.dll.... Edward LoPinto's libssh2.dll seems to be a static build with regards to the zlib compression routines (zlib routines are included in the dll instead of a separate dll). Edward LoPinto's package contains zlib1.dll but it seems it isn't used by any of the dlls. So with this package you need msvcr120.dll instead of zlib1.dll.

Tested: www.confusedbycode.com/curl/curl-7.35.0-win32-fix1.zip/dlls/*

[Gerby]

Can you check with Process Explorer if zlib1.dll is loaded from some other place?

Ah, here we go! You're right, white!
zlib1.dll is installed by Intel's Wifi software. This file is found and used by libssh2.dll in my environment. I checked it with the fileinfo plugin on the Dll Dependency tab.

Learned something new again. Thanks for the hint.

[white]

2ghisler(Author)
Is it true that Total Commander only depends on libssh2.dll for the Secure FTP plugin and ssleay32.dll for the internal FTPS function and that other required files (libeay32.dll, zlib1.dll, msvcr120.dll) are dependent files of these dlls?

[ghisler(Author)]

SFTP: Yes
FTPS: No, it uses both dlls

[white]

SFTP: Yes
FTPS: No, it uses both dlls

Thanks for clearing that up.

[Nigurrath]

what about lates heartbleed bug which affects ssl from 1.00 to 1.01f ??

the CURL is still stopped at 1.01f

[white]

what about lates heartbleed bug which affects ssl from 1.00 to 1.01f ??

the CURL is still stopped at 1.01f

Try Edward LoPinto's binary files. A link is present on the curl page. Download the zip version and use the dlls from the folder "dlls" inside the zip file. As mentioned above with these dll files you will need msvcr120.dll (included in the package).

[ghisler(Author)]

Isn't this a server side problem only?

Edit: According to my research, this concerns mainly the server side, except when a manipulated server is accessed. It also does NOT affect SSH/SFTP, only SSL/FTPS when using TLS.