[Cyberduck-trac] [Cyberduck] #9674: Client certificate prompt keeps showing up

Cyberduck trac at trac.cyberduck.io
Fri Sep 9 18:04:42 UTC 2016


#9674: Client certificate prompt keeps showing up
-----------------------------------------+-------------------------
 Reporter:  c_scheurle                   |         Owner:  yla
     Type:  defect                       |        Status:  reopened
 Priority:  normal                       |     Milestone:  5.2
Component:  ftp-tls                      |       Version:  5.1
 Severity:  normal                       |    Resolution:
 Keywords:  ftps, ftp, TLS, certificate  |  Architecture:  Intel
 Platform:  Mac OS X 10.11               |
-----------------------------------------+-------------------------
Changes (by c_scheurle):

 * status:  closed => reopened
 * resolution:  thirdparty =>


Comment:

 Replying to [comment:8 dkocher]:
 > The server is misconfigured and asking for a client certificate to
 authenticate.
 > Please contact the server adminstrator.


 I ''am'' the administrator. And, after tripple-checking every
 configuration line, I can assure you: the server's configured quite fine.

 To be honest, I don't know much about FTP, about TLS or where the heck
 that line your citing above came from. But the way I understand it: No.
 The server is ''not'' asking for a certificate, it's just offering to read
 one, ''in case'' there is any. I fixed the issue server side by using
 `TLSOptions NoCertRequest`. Quoting from the
 [http://proftpd.org/docs/directives/linked/config_ref_TLSOptions.html
 ProFTPD docs]:

  '''Some FTP clients''' are known to be '''buggy''' when handling a
 server's certificate request. This option causes the server not to include
 such a request during an SSL handshake.

 So, i.m.h.o. this ''is'' a bug. And since TLS mutual authentication has
 been in Cyberduck for over 2 years, yet the bug started showing up just
 now, it's a regression.

--
Ticket URL: <https://trac.cyberduck.io/ticket/9674#comment:9>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list