Onsdag den 28:e Oktober 2015, klockan 09:31, skrev Matus UHLAR - fantomas detta: > >Fredag den 16:e Oktober 2015, klockan 10:22, skrev Matus UHLAR - fantomas > >detta: > > > >produces a tcpdump file where the only clear text parts are > >"AUTH SSL", "AUTH SSL OK", and the plain text contained in > >the certificate, which the server sends to the client. > > did you also look at data connection? For both incoming and outgoing data?
tcpdump -r ftpsession -i lo port ftp or port ftp-data > >Can you repeat your exchanges, clearly stating what options Please do state your call. I specifically want to know if you have any debugging turned which might upset socket use. Understood? > >you are feeding to the client. Do you observe a statement > >fairly early containing an encryption selector? This shows > >that encryption is active. > > I have re-tested the session again and the same happened > - the control connnection is encrypted. > - the data fetched through the data connection are encrypted > - the data are not written to the local file, but sent through the data > connection back to server unencrypted. > > what size was the downloaded file on your machine? Identical sizes and empty respons from 'diff'. /MEA
