[Cyberduck-trac] [Cyberduck] #5087: Reuse Session key on Data connection
Cyberduck
trac at trac.cyberduck.ch
Sun Aug 8 13:04:25 CEST 2010
#5087: Reuse Session key on Data connection
----------------------------+-----------------------------------------------
Reporter: abrax5 | Owner: dkocher
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: ftp-tls | Version: 3.5.1
Severity: normal | Resolution:
Keywords: proftpd | Platform: Mac OS X 10.6
Architecture: Intel |
----------------------------+-----------------------------------------------
Changes (by dkocher):
* component: core => ftp-tls
Old description:
> I saw that it's described as a known issue in the Wiki, but still, could
> this be implemented?
>
> From the ProFTPd documentation
> (http://www.proftpd.org/docs/contrib/mod_tls.html)
> "NoSessionReuseRequired
> As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections
> that reuse the SSL session of the control connection, as a security
> measure. Unfortunately, there are some clients (e.g. curl) which do not
> reuse SSL sessions."
>
> I see this incompatibility with my Debian ProFTPd 1.3.3a.
>
> Thanks
New description:
I saw that it's described as a known issue in the Wiki, but still, could
this be implemented?
From the ProFTPd documentation
(http://www.proftpd.org/docs/contrib/mod_tls.html)
* NoSessionReuseRequired
{{{
As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections that
reuse the SSL session of the control connection, as a security measure.
Unfortunately, there are some clients (e.g. curl) which do not reuse SSL
sessions.
}}}
I see this incompatibility with my Debian ProFTPd 1.3.3a.
Thanks
--
--
Ticket URL: <http://trac.cyberduck.ch/ticket/5087#comment:1>
Cyberduck <http://cyberduck.ch>
FTP, SFTP, WebDAV, Cloud Files, Google Docs, Azure and S3 Browser for Mac OS X.
More information about the Cyberduck-trac
mailing list