[Cyberduck-trac] [Cyberduck] #5087: Reuse Session key on Data connection

[Cyberduck]

#5087: Reuse Session key on Data connection
----------------------------+-----------------------------------------------
    Reporter:  abrax5       |        Owner:  dkocher      
        Type:  enhancement  |       Status:  new          
    Priority:  normal       |    Milestone:               
   Component:  ftp-tls      |      Version:  3.5.1        
    Severity:  normal       |   Resolution:               
    Keywords:  proftpd      |     Platform:  Mac OS X 10.6
Architecture:  Intel        |  
----------------------------+-----------------------------------------------
Changes (by dkocher):

  * component:  core => ftp-tls


Old description:

> I saw that it's described as a known issue in the Wiki, but still, could
> this be implemented?
>
> From the ProFTPd documentation
> (http://www.proftpd.org/docs/contrib/mod_tls.html)
> "NoSessionReuseRequired
> As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections
> that reuse the SSL session of the control connection, as a security
> measure. Unfortunately, there are some clients (e.g. curl) which do not
> reuse SSL sessions."
>
> I see this incompatibility with my Debian ProFTPd 1.3.3a.
>
> Thanks

New description:

 I saw that it's described as a known issue in the Wiki, but still, could
 this be implemented?

 From the ProFTPd documentation
 (http://www.proftpd.org/docs/contrib/mod_tls.html)
  * NoSessionReuseRequired
 {{{
 As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections that
 reuse the SSL session of the control connection, as a security measure.
 Unfortunately, there are some clients (e.g. curl) which do not reuse SSL
 sessions.
 }}}


 I see this incompatibility with my Debian ProFTPd 1.3.3a.

 Thanks

--

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/5087#comment:1>
Cyberduck <http://cyberduck.ch>
FTP, SFTP, WebDAV, Cloud Files, Google Docs, Azure and S3 Browser for Mac OS X.