[Cyberduck-trac] [Cyberduck] #9674: Client certificate prompt keeps showing up
Cyberduck
trac at trac.cyberduck.io
Fri Sep 9 18:04:42 UTC 2016
#9674: Client certificate prompt keeps showing up
-----------------------------------------+-------------------------
Reporter: c_scheurle | Owner: yla
Type: defect | Status: reopened
Priority: normal | Milestone: 5.2
Component: ftp-tls | Version: 5.1
Severity: normal | Resolution:
Keywords: ftps, ftp, TLS, certificate | Architecture: Intel
Platform: Mac OS X 10.11 |
-----------------------------------------+-------------------------
Changes (by c_scheurle):
* status: closed => reopened
* resolution: thirdparty =>
Comment:
Replying to [comment:8 dkocher]:
> The server is misconfigured and asking for a client certificate to
authenticate.
> Please contact the server adminstrator.
I ''am'' the administrator. And, after tripple-checking every
configuration line, I can assure you: the server's configured quite fine.
To be honest, I don't know much about FTP, about TLS or where the heck
that line your citing above came from. But the way I understand it: No.
The server is ''not'' asking for a certificate, it's just offering to read
one, ''in case'' there is any. I fixed the issue server side by using
`TLSOptions NoCertRequest`. Quoting from the
[http://proftpd.org/docs/directives/linked/config_ref_TLSOptions.html
ProFTPD docs]:
'''Some FTP clients''' are known to be '''buggy''' when handling a
server's certificate request. This option causes the server not to include
such a request during an SSL handshake.
So, i.m.h.o. this ''is'' a bug. And since TLS mutual authentication has
been in Cyberduck for over 2 years, yet the bug started showing up just
now, it's a regression.
--
Ticket URL: <https://trac.cyberduck.io/ticket/9674#comment:9>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list