edtFTPj/PRO example with FTPS

Question

Hello,

I don't understand well FTP SSL. I'm using Filezilla server, auto-signed certificat generated by Filezilla. I read documentation (How to) of edtFTPj/PRO, but it's defintily not enough for newbie in the world of SSL.

Can help me to find an example ?

Best regards

Answer 1

Why are you using port 990?

Answer 2

It's the default FTPS port.

Answer 3

No, it's not. The default port is 21. The 990 port is the default port for implicit mode FTPS, which is a much older redundant protocol that should only be used if you have no other option.

Answer 4

Ok it solve my problem :D

Thanks a lot :)

Another question : on Filezilla (nor Wireshark log) i see all is ok (transfert is made in SSL), but i asking myself a question : i can't see message showing me that certificat are checked. Is that normal ?

Answer 5

Enable logging at the debug level and you should see a mention in the log of this.

Answer 6

It's ok. I made all exception so i know when all is ok.

Thanks for your help.

Answer 7

I have another issue :?

What i made is a "server validation" : i though it was the server that check client. Now i think the opposite : it's the client that check server. Is that right ?

Now i need to do "double validation (so client/server)". I saw the example. The problem is not coding problem, but understanding SSL.
I don't understand at all, where configurung Filezilla server to check client !

ftps.loadClientCertificate(clientCertFileName, clientKeyPassphrase);

Filezilla server got 3 SSL settings :
- Privatekey file
- Certificate file (that i used for the previous step - importPEMFile())
- Key password

So there is no "ClientCertificateFile settings".

Thanks for your help

Answer 8

I don't think Filezilla server supports client certificates.

Answer 9

I don't think Filezilla server supports client certificates.

It may be a good explain :)

Answer 10

To avoid that, i downloaded your server FTP, CompleteFTP.
In Settings / FTP/FTPS / Advanced FTP/S Settings / Security settings / Server certificate i clicked on "..." and then Export to a file (cert.pem).
Then i copy this file on my client. And :

secureFtpClient.getRootCertificateStore().importPEMFile("C:\\cert.pem");

This line throw SSLFTPCertificateException: Server certificate could not be validated. !!!

I didn't have this problem with Filezilla :?