[Cyberduck-trac] [Cyberduck] #8766: Implement correct SSL shutdown on closing connection
Cyberduck
trac at trac.cyberduck.io
Sun Apr 26 02:54:56 UTC 2015
#8766: Implement correct SSL shutdown on closing connection
-----------------------+-----------------------------
Reporter: jankok | Owner:
Type: defect | Status: new
Priority: normal | Milestone: 4.8
Component: core | Version: 4.7
Severity: normal | Keywords: rfc2246 ftp-ssl
Architecture: Intel | Platform: Mac OS X 10.10
-----------------------+-----------------------------
When Cyberduck FTP-SSL closes the FTP connection it doesn't first perform
the
SSL shutdown that is expected by the FTP-SSL implementation.
Before closing the TCP connection, a correct TLS shutdown should be
initiated.
Specification for closing TLS connections:
http://www.ietf.org/rfc/rfc2246.txt
Correct Behaviour for shutdown is important to ensure TLS' resistance
against truncation attacks.
--
Ticket URL: <https://trac.cyberduck.io/ticket/8766>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list