[Cyberduck-trac] [Cyberduck] #8766: Implement correct SSL shutdown on closing connection

[Cyberduck]

#8766: Implement correct SSL shutdown on closing connection
-----------------------+-----------------------------
    Reporter:  jankok  |      Owner:
        Type:  defect  |     Status:  new
    Priority:  normal  |  Milestone:  4.8
   Component:  core    |    Version:  4.7
    Severity:  normal  |   Keywords:  rfc2246 ftp-ssl
Architecture:  Intel   |   Platform:  Mac OS X 10.10
-----------------------+-----------------------------
 When Cyberduck FTP-SSL closes the FTP connection it doesn't first perform
 the
 SSL shutdown that is expected by the FTP-SSL implementation.

 Before closing the TCP connection, a correct TLS shutdown should be
 initiated.

 Specification for closing TLS connections:
 http://www.ietf.org/rfc/rfc2246.txt

 Correct Behaviour for shutdown is important to ensure TLS' resistance
 against truncation attacks.

-- 
Ticket URL: <https://trac.cyberduck.io/ticket/8766>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows