Re: PHP4-package for using FTP-SSL?
> is there a package available (similar to the ftp-package which can be > found in the pear-lib) to use ftp with ssl? I'm not looking for SFTP > (SSH-filetransfer) but SSL with "AUTH SSL" at the beginning of the for server - proftpd, for client - for example lftp. -- Dariush Pietrzak, She swore and she cursed, that she never would deceive me Key fingerprint = 40D0 9FFB 9939 7320 8294 05E0 BCC7 02C4 75CC 50D9
PHP4-package for using FTP-SSL?
Hi, is there a package available (similar to the ftp-package which can be found in the pear-lib) to use ftp with ssl? I'm not looking for SFTP (SSH-filetransfer) but SSL with "AUTH SSL" at the beginning of the session. All the best Stefan
Re: FTP-SSL
Quoting Joey Hess ([EMAIL PROTECTED]): > sftp is of value if only because it lets you use lftp fish:// , so you > get a kick-ass ftp client interface with ssh encrypted goodness in the > backend. I quite forgot about the _very_ nice FISH (FIles over SHell) protocol, and have just now been playing with it. _However_, I'm not sure it requires or uses sftp. http://lftp.yar.ru/features.html states: FISH protocol support. It uses ssh with no special program on server side. The idea of FISH has the client side using a type of glue software called an IOSlave (one for FISH) to remap client requests as shell commands sent over an ssh tunnel, and then map back the return values. Several implementations exist. A suitably compiled kdebase 3.x package would include the kio_fish one[1], but I don't think ours do, yet(?).[2] Midnight Commander supports it as a virtual filesystem: http://canvas.gnome.org:65348/mc/maillist/98-09/30222.905989653.154697968.html [1] http://ich.bin.kein.hoschi.de/fish/ [2] My silly wild-ass guess, based on having installed unofficial konqueror and kioslave packages from http://people.debian.org/~schoepf/kde3/woody/ . -- Cheers, We write preciselyWe say exactly Rick Moen Since such is our habit inHow to do a thing or how [EMAIL PROTECTED] Talking to machines; Every detail works. Excerpt from Prof. Touretzky's decss-haiku.txt @ http://www.cs.cmu.edu/~dst/
Re: FTP-SSL
Quoting Joey Hess ([EMAIL PROTECTED]): > sftp is of value if only because it lets you use lftp fish:// , so you > get a kick-ass ftp client interface with ssh encrypted goodness in the > backend. I quite forgot about the _very_ nice FISH (FIles over SHell) protocol, and have just now been playing with it. _However_, I'm not sure it requires or uses sftp. http://lftp.yar.ru/features.html states: FISH protocol support. It uses ssh with no special program on server side. The idea of FISH has the client side using a type of glue software called an IOSlave (one for FISH) to remap client requests as shell commands sent over an ssh tunnel, and then map back the return values. Several implementations exist. A suitably compiled kdebase 3.x package would include the kio_fish one[1], but I don't think ours do, yet(?).[2] Midnight Commander supports it as a virtual filesystem: http://canvas.gnome.org:65348/mc/maillist/98-09/30222.905989653.154697968.html [1] http://ich.bin.kein.hoschi.de/fish/ [2] My silly wild-ass guess, based on having installed unofficial konqueror and kioslave packages from http://people.debian.org/~schoepf/kde3/woody/ . -- Cheers, We write preciselyWe say exactly Rick Moen Since such is our habit inHow to do a thing or how [EMAIL PROTECTED] Talking to machines; Every detail works. Excerpt from Prof. Touretzky's decss-haiku.txt @ http://www.cs.cmu.edu/~dst/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Rick Moen wrote: > sftp is really an odd beast, which is part of why it's used so little. > If you can get mileage out of "many features of ssh" within it, you're > doing better than anyone else I know of. sftp is of value if only because it lets you use lftp fish:// , so you get a kick-ass ftp client interface with ssh encrypted goodness in the backend. -- see shy jo pgpLpBfP61WGt.pgp Description: PGP signature
Re: FTP-SSL
Rick Moen wrote: > sftp is really an odd beast, which is part of why it's used so little. > If you can get mileage out of "many features of ssh" within it, you're > doing better than anyone else I know of. sftp is of value if only because it lets you use lftp fish:// , so you get a kick-ass ftp client interface with ssh encrypted goodness in the backend. -- see shy jo msg08308/pgp0.pgp Description: PGP signature
Re: FTP-SSL
On Wed, 18 Dec 2002 10:53:45 +0100, <[EMAIL PROTECTED]> wrote:
>and I need some ftp-ssl client for windows 2000, is there anyone free ?
I use FileZilla (http://filezilla.sourceforge.net), which is free and
GPL'd, and lean and fast, and has a fairly nice interface. It does
FTP, SFTP over SSH2, and two kinds of FTP over SSL ("implicit
encryption" and "explicit encryption"). I've used the FTP mode (works
fine), and the SFTP mode to a Debian system running OpenSSH - worked
fine for me and the SFTP user interface it gave me was just like a
regular FTP client session (I couldn't tell the difference).
[I've never even seen an FTP-SSL server, never mind tested against one
- does anyone know any pros & cons versus SFTP ? ]
FileZilla also interfaces with PuTTY if installed, to make use of
PuTTY's keystore for authenticating against the SFTP server - sounds
useful but I didn't try it yet.
As far as the argument about SCP vs SFTP is concerned, I wouldn't know
myself, but PuTTY's helpfile says this :
< cut >===
If you have an SSH 2 server, you might prefer PSFTP ... for
interactive use. PSFTP does not in general work with SSH 1 servers,
however.
[There is a security problem with the way SCP connections handle
wildcard filenames that is due to] a fundamental insecurity in the
old-style SCP protocol: the client sends the wildcard string (*.c) to
the server, and the server sends back a sequence of file names that
match the wildcard pattern. However, there is nothing to stop the
server sending back a different pattern and writing over one of your
other files: if you request *.c, the server might send back the file
name AUTOEXEC.BAT and install a virus for you. Since the wildcard
matching rules are decided by the server, the client cannot reliably
verify that the filenames sent back match the pattern.
PSCP will attempt to use the newer SFTP protocol (part of SSH 2) where
possible, which does not suffer from this security flaw. If you are
talking to an SSH 2 server which supports SFTP, you will never see
this warning.
If you really need to use a server-side wildcard with an SSH 1 server,
you can use the -unsafe command line option with PSCP:
[example snipped]
This will suppress the warning message and the file transfer will
happen. However, you should be aware that by using this option you are
giving the server the ability to write to any file in the target
directory, so you should only use this option if you trust the server
administrator not to be malicious (and not to let the server machine
be cracked by malicious people).
[...]
PSFTP, the PuTTY SFTP client, is a tool for transferring files
securely between computers using an SSH connection.
PSFTP differs from PSCP in the following ways:
PSCP should work on virtually every SSH server. PSFTP uses the new
SFTP protocol, which is a feature of SSH 2 only. (PSCP will also use
this protocol if it can, but there is an SSH 1 equivalent it can fall
back to if it cannot.)
< cut >===
Hope some of that helps :)
Nick Boyce
Bristol, UK
--
Special Relativity: The person in the other queue thinks yours is
moving faster.
Re: FTP-SSL
On Wed, 18 Dec 2002 10:53:45 +0100, <[EMAIL PROTECTED]> wrote:
>and I need some ftp-ssl client for windows 2000, is there anyone free ?
I use FileZilla (http://filezilla.sourceforge.net), which is free and
GPL'd, and lean and fast, and has a fairly nice interface. It does
FTP, SFTP over SSH2, and two kinds of FTP over SSL ("implicit
encryption" and "explicit encryption"). I've used the FTP mode (works
fine), and the SFTP mode to a Debian system running OpenSSH - worked
fine for me and the SFTP user interface it gave me was just like a
regular FTP client session (I couldn't tell the difference).
[I've never even seen an FTP-SSL server, never mind tested against one
- does anyone know any pros & cons versus SFTP ? ]
FileZilla also interfaces with PuTTY if installed, to make use of
PuTTY's keystore for authenticating against the SFTP server - sounds
useful but I didn't try it yet.
As far as the argument about SCP vs SFTP is concerned, I wouldn't know
myself, but PuTTY's helpfile says this :
< cut >===
If you have an SSH 2 server, you might prefer PSFTP ... for
interactive use. PSFTP does not in general work with SSH 1 servers,
however.
[There is a security problem with the way SCP connections handle
wildcard filenames that is due to] a fundamental insecurity in the
old-style SCP protocol: the client sends the wildcard string (*.c) to
the server, and the server sends back a sequence of file names that
match the wildcard pattern. However, there is nothing to stop the
server sending back a different pattern and writing over one of your
other files: if you request *.c, the server might send back the file
name AUTOEXEC.BAT and install a virus for you. Since the wildcard
matching rules are decided by the server, the client cannot reliably
verify that the filenames sent back match the pattern.
PSCP will attempt to use the newer SFTP protocol (part of SSH 2) where
possible, which does not suffer from this security flaw. If you are
talking to an SSH 2 server which supports SFTP, you will never see
this warning.
If you really need to use a server-side wildcard with an SSH 1 server,
you can use the -unsafe command line option with PSCP:
[example snipped]
This will suppress the warning message and the file transfer will
happen. However, you should be aware that by using this option you are
giving the server the ability to write to any file in the target
directory, so you should only use this option if you trust the server
administrator not to be malicious (and not to let the server machine
be cracked by malicious people).
[...]
PSFTP, the PuTTY SFTP client, is a tool for transferring files
securely between computers using an SSH connection.
PSFTP differs from PSCP in the following ways:
PSCP should work on virtually every SSH server. PSFTP uses the new
SFTP protocol, which is a feature of SSH 2 only. (PSCP will also use
this protocol if it can, but there is an SSH 1 equivalent it can fall
back to if it cannot.)
< cut >===
Hope some of that helps :)
Nick Boyce
Bristol, UK
--
Special Relativity: The person in the other queue thinks yours is
moving faster.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
On Thu, 19/12/2002 11:12 +0100, Daniel Lysfjord wrote: >> Depends: ..., libssl0.9.6, ... > > > From man lftp(1) : > >lftp can handle six file access methods - ftp, ftps, http, >https, hftp, fish and file (https and ftps are only avail >able when lftp is compiled with openssl library). > > apt-cache show ftp : > > Description: Sophisticated command-line FTP/HTTP client programs > Lftp is a file retrieving tool that supports FTP and HTTP protocols under > both IPv4 and IPv6. Lftp has an amazing set of features, while preserving > its interface as simple and easy as possible. > > Seems like it should work with ftps, but the description doesn't mention it... > Anybody know about this. I don't know any ftps-servers, so I can't test if it > works... Only the version in unstable depends on libssl, the version in woody doesn't. -- Tim van Erven <[EMAIL PROTECTED]> OpenPGP Key ID: 712CB811Fingerprint: F6C9 61EE 242C C012 36D5 BBF8 6310 D557 712C B811
Re: FTP-SSL
On Thu, 19/12/2002 11:12 +0100, Daniel Lysfjord wrote: >> Depends: ..., libssl0.9.6, ... > > > From man lftp(1) : > >lftp can handle six file access methods - ftp, ftps, http, >https, hftp, fish and file (https and ftps are only avail >able when lftp is compiled with openssl library). > > apt-cache show ftp : > > Description: Sophisticated command-line FTP/HTTP client programs > Lftp is a file retrieving tool that supports FTP and HTTP protocols under > both IPv4 and IPv6. Lftp has an amazing set of features, while preserving > its interface as simple and easy as possible. > > Seems like it should work with ftps, but the description doesn't mention it... > Anybody know about this. I don't know any ftps-servers, so I can't test if it > works... Only the version in unstable depends on libssl, the version in woody doesn't. -- Tim van Erven <[EMAIL PROTECTED]> OpenPGP Key ID: 712CB811Fingerprint: F6C9 61EE 242C C012 36D5 BBF8 6310 D557 712C B811 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]>: > On Thu, 19 Dec 2002, Daniel Lysfjord wrote: > > > It seems like FileZilla[1] supports ftp-ssl.. > > > > [1]: http://sourceforge.net/projects/filezilla > > What about lftp? > > Depends: ..., libssl0.9.6, ... >From man lftp(1) : lftp can handle six file access methods - ftp, ftps, http, https, hftp, fish and file (https and ftps are only avail able when lftp is compiled with openssl library). apt-cache show ftp : Description: Sophisticated command-line FTP/HTTP client programs Lftp is a file retrieving tool that supports FTP and HTTP protocols under both IPv4 and IPv6. Lftp has an amazing set of features, while preserving its interface as simple and easy as possible. Seems like it should work with ftps, but the description doesn't mention it... Anybody know about this. I don't know any ftps-servers, so I can't test if it works...
Re: FTP-SSL
On Thu, 19 Dec 2002, Daniel Lysfjord wrote: > It seems like FileZilla[1] supports ftp-ssl.. > > [1]: http://sourceforge.net/projects/filezilla What about lftp? Depends: ..., libssl0.9.6, ...
Re: FTP-SSL
It seems like FileZilla[1] supports ftp-ssl.. [1]: http://sourceforge.net/projects/filezilla
Re: FTP-SSL
Quoting Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]>: > On Thu, 19 Dec 2002, Daniel Lysfjord wrote: > > > It seems like FileZilla[1] supports ftp-ssl.. > > > > [1]: http://sourceforge.net/projects/filezilla > > What about lftp? > > Depends: ..., libssl0.9.6, ... >From man lftp(1) : lftp can handle six file access methods - ftp, ftps, http, https, hftp, fish and file (https and ftps are only avail able when lftp is compiled with openssl library). apt-cache show ftp : Description: Sophisticated command-line FTP/HTTP client programs Lftp is a file retrieving tool that supports FTP and HTTP protocols under both IPv4 and IPv6. Lftp has an amazing set of features, while preserving its interface as simple and easy as possible. Seems like it should work with ftps, but the description doesn't mention it... Anybody know about this. I don't know any ftps-servers, so I can't test if it works... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
On Thu, 19 Dec 2002, Daniel Lysfjord wrote: > It seems like FileZilla[1] supports ftp-ssl.. > > [1]: http://sourceforge.net/projects/filezilla What about lftp? Depends: ..., libssl0.9.6, ... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
It seems like FileZilla[1] supports ftp-ssl.. [1]: http://sourceforge.net/projects/filezilla -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Jeffrey Taylor ([EMAIL PROTECTED]): > Quoting Rick Moen <[EMAIL PROTECTED]>: > > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > > > otherwise secure windoze clients ... > > > ( winscp and equivalent ... > > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > > > That's a listing of "MS Windows SSH Clients", and includes > > > > o SafeTP -- but that has no SSH support > > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) > > o GlubTech Secure FTP -- but that has no SSH support > > o InterSoft International, Inc. SecureFTP -- but I see nothing > > suggesting it will support any SSH protocol, do you? > > o HostExplorer -- but that doesn't do SSH, just Kerberos. > > o SRP -- but that's not SSH at all > > > > Am I missing something? > > > > Also PuTTY. Includes scp and sftp clients. Command line only. I think you misunderstood the question. I was asking Alvin if there was some reason why software that provides no SSH functionality whatsoever was included in his list of "MS Windows SSH Clients". I'm very aware of PuTTY. If you know of any SSH software missing from _this_ list (mine), please let me know: http://linuxmafia.com/pub/linux/security/ssh-clients -- Cheers, "Besides, Debian runs Web sites, Red Hat runs Rick Moen Quake, and Windows runs Half-Life." [EMAIL PROTECTED] -- Bryce Kerley (on Slashdot)
Re: FTP-SSL
Quoting John Corrigan ([EMAIL PROTECTED]): > TeraTerm is now maintained at http://www.ayera.com/teraterm/ It would be more exact to say that Ayera have created a proprietary fork (TeraTerm Pro Web) of T. Teranishi and Robert O'Callahan's open-source original codebase. > CygWin does include working ssh and scp. I'm guessing that would be Corinna Vinschen's port to Cygwin, right? Or is it Jarle Aase's or Mark Bradshaw's? -- Cheers, "Besides, Debian runs Web sites, Red Hat runs Rick Moen Quake, and Windows runs Half-Life." [EMAIL PROTECTED] -- Bryce Kerley (on Slashdot)
Re: FTP-SSL
Quoting Jeffrey Taylor ([EMAIL PROTECTED]): > Quoting Rick Moen <[EMAIL PROTECTED]>: > > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > > > otherwise secure windoze clients ... > > > ( winscp and equivalent ... > > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > > > That's a listing of "MS Windows SSH Clients", and includes > > > > o SafeTP -- but that has no SSH support > > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) > > o GlubTech Secure FTP -- but that has no SSH support > > o InterSoft International, Inc. SecureFTP -- but I see nothing > > suggesting it will support any SSH protocol, do you? > > o HostExplorer -- but that doesn't do SSH, just Kerberos. > > o SRP -- but that's not SSH at all > > > > Am I missing something? > > > > Also PuTTY. Includes scp and sftp clients. Command line only. I think you misunderstood the question. I was asking Alvin if there was some reason why software that provides no SSH functionality whatsoever was included in his list of "MS Windows SSH Clients". I'm very aware of PuTTY. If you know of any SSH software missing from _this_ list (mine), please let me know: http://linuxmafia.com/pub/linux/security/ssh-clients -- Cheers, "Besides, Debian runs Web sites, Red Hat runs Rick Moen Quake, and Windows runs Half-Life." [EMAIL PROTECTED] -- Bryce Kerley (on Slashdot) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting John Corrigan ([EMAIL PROTECTED]): > TeraTerm is now maintained at http://www.ayera.com/teraterm/ It would be more exact to say that Ayera have created a proprietary fork (TeraTerm Pro Web) of T. Teranishi and Robert O'Callahan's open-source original codebase. > CygWin does include working ssh and scp. I'm guessing that would be Corinna Vinschen's port to Cygwin, right? Or is it Jarle Aase's or Mark Bradshaw's? -- Cheers, "Besides, Debian runs Web sites, Red Hat runs Rick Moen Quake, and Windows runs Half-Life." [EMAIL PROTECTED] -- Bryce Kerley (on Slashdot) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: FTP-SSL
otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP Seems a little dated. TeraTerm is now maintained at http://www.ayera.com/teraterm/ CygWin does include working ssh and scp. -Original Message- From: Alvin Oga [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 18, 2002 2:40 AM To: Rick Moen Cc: debian-security@lists.debian.org Subject: Re: FTP-SSL hi ya abelmmg On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Yahoo ([EMAIL PROTECTED]): > > > I am interesting to setup a ftp daemon with SSL option, which is an > > useful option ??? and I need some ftp-ssl client for windows 2000, is > > there anyone free ? just wondering... why not offer https instead of ftpssl ?? ( lot more ready-to-go https clients too ) otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP > I think the second question (almost) answers the first: The big > problem with offering ftp-ssl is the shortage of compatible client > software -- and all the puzzled e-mail from users who expect their > regular ftp software to work, and report "bugs" when it doesn't. > > On the server end, you can use Roxen Challenger or SSLftpd. And there > are probably other ways, too. c ya alvin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: FTP-SSL
otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP Seems a little dated. TeraTerm is now maintained at http://www.ayera.com/teraterm/ CygWin does include working ssh and scp. -Original Message- From: Alvin Oga [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 18, 2002 2:40 AM To: Rick Moen Cc: [EMAIL PROTECTED] Subject: Re: FTP-SSL hi ya abelmmg On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Yahoo ([EMAIL PROTECTED]): > > > I am interesting to setup a ftp daemon with SSL option, which is an > > useful option ??? and I need some ftp-ssl client for windows 2000, is > > there anyone free ? just wondering... why not offer https instead of ftpssl ?? ( lot more ready-to-go https clients too ) otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP > I think the second question (almost) answers the first: The big > problem with offering ftp-ssl is the shortage of compatible client > software -- and all the puzzled e-mail from users who expect their > regular ftp software to work, and report "bugs" when it doesn't. > > On the server end, you can use Roxen Challenger or SSLftpd. And there > are probably other ways, too. c ya alvin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: FTP-SSL
> I am interesting to setup a ftp daemon with SSL option, which is an > useful option ??? and I need some ftp-ssl client for windows 2000, is > there anyone free ? check http://pftp.suxx.sk/, you can use winsslwrapper for your favorite ftp client :) m.
Re: FTP-SSL
Quoting Rick Moen <[EMAIL PROTECTED]>: > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > otherwise secure windoze clients ... > > ( winscp and equivalent ... > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > That's a listing of "MS Windows SSH Clients", and includes > > o SafeTP -- but that has no SSH support > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) > o GlubTech Secure FTP -- but that has no SSH support > o InterSoft International, Inc. SecureFTP -- but I see nothing > suggesting it will support any SSH protocol, do you? > o HostExplorer -- but that doesn't do SSH, just Kerberos. > o SRP -- but that's not SSH at all > > Am I missing something? > Also PuTTY. Includes scp and sftp clients. Command line only. Jeffrey
Re: FTP-SSL - very nice
hi ya "pain" On Wed, 18 Dec 2002 [EMAIL PROTECTED] wrote: > Hi, > > The SmartFTP windows client support ftp over ssl and is free for personal, > educational or non-comercial use. Its available for download at : > http://www.smartftp.com/download/ very nice info at least... lets see over time what windoze folks say c ya alvin
RE: FTP-SSL
> I am interesting to setup a ftp daemon with SSL option, which is an > useful option ??? and I need some ftp-ssl client for windows 2000, is > there anyone free ? check http://pftp.suxx.sk/, you can use winsslwrapper for your favorite ftp client :) m. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Rick Moen <[EMAIL PROTECTED]>: > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > otherwise secure windoze clients ... > > ( winscp and equivalent ... > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > That's a listing of "MS Windows SSH Clients", and includes > > o SafeTP -- but that has no SSH support > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) > o GlubTech Secure FTP -- but that has no SSH support > o InterSoft International, Inc. SecureFTP -- but I see nothing > suggesting it will support any SSH protocol, do you? > o HostExplorer -- but that doesn't do SSH, just Kerberos. > o SRP -- but that's not SSH at all > > Am I missing something? > Also PuTTY. Includes scp and sftp clients. Command line only. Jeffrey -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Xavier Santolaria ([EMAIL PROTECTED]): > Because sftp(1) understands a set of commands similar to those of > ftp(1). I'm unclear on why this is such an attraction, but whatever Works for Him[tm]. > It may also use many features of ssh. sftp is really an odd beast, which is part of why it's used so little. If you can get mileage out of "many features of ssh" within it, you're doing better than anyone else I know of.
Re: FTP-SSL - very nice
hi ya "pain" On Wed, 18 Dec 2002 [EMAIL PROTECTED] wrote: > Hi, > > The SmartFTP windows client support ftp over ssl and is free for personal, > educational or non-comercial use. Its available for download at : > http://www.smartftp.com/download/ very nice info at least... lets see over time what windoze folks say c ya alvin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Hi,
The SmartFTP windows client support ftp over ssl and is free for personal,
educational or non-comercial use. Its available for download at :
http://www.smartftp.com/download/
Its my favourite windows ftp client since i discover it, very pretty and
functional.
bye
Xavier Santolaria writes:
On Wed, Dec 18, 2002 at 03:38:22AM -0800, Rick Moen wrote:
> why not use sftp(1) ?
Why not use scp, optionally with the various graphical front-ends that
exist on the client side? All known options for various OSes are
included here: http://linuxmafia.com/pub/linux/security/ssh-clients
(It's a great deal more universally supported than is sftp.)
Because sftp(1) understands a set of commands similar to those of ftp(1).
It may also use many features of ssh.
I think it's easier for him.
just my 2 cents.
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
Re: FTP-SSL
On Wed, Dec 18, 2002 at 03:38:22AM -0800, Rick Moen wrote:
> > why not use sftp(1) ?
>
> Why not use scp, optionally with the various graphical front-ends that
> exist on the client side? All known options for various OSes are
> included here: http://linuxmafia.com/pub/linux/security/ssh-clients
>
> (It's a great deal more universally supported than is sftp.)
Because sftp(1) understands a set of commands similar to those of ftp(1).
It may also use many features of ssh.
I think it's easier for him.
just my 2 cents.
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
pgp6pB7auEZPz.pgp
Description: PGP signature
Re: FTP-SSL
hi ya rick On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > otherwise secure windoze clients ... > > ( winscp and equivalent ... > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > That's a listing of "MS Windows SSH Clients", and includes think you meant "FTP" section .. i've separated the ssh vs secure-ftp clients section ... i got tired of explaining the differences to some folks and just tell 'um to get winscp now dayz... - though i tend NOT to use either... i just see people using this or that... winscp being the lastest i saw that was really nice.. about 1.5yrs ago > o SafeTP -- but that has no SSH support yes.. > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) yes... i was lazy.. dropped Pro... since usually windoze Pro versions are not free... and trail versions expire.. etc... - users shoudl be abel to figure it out?? > o GlubTech Secure FTP -- but that has no SSH support yup.. > o InterSoft International, Inc. SecureFTP -- but I see nothing > suggesting it will support any SSH protocol, do you? ah, yes... there's a test/beta version.. and i decided to list um anyway... since i didnt wanna update these files again > o HostExplorer -- but that doesn't do SSH, just Kerberos. kerberos is sometimes good enough ?? > o SRP -- but that's not SSH at all "This site serves as the semi-offical home of the SRP distribution, which contains secure versions of Telnet and FTP." and yes... its NOT ssh/ssl/kerberos... but decided to list it anyway > Am I missing something? nope... very good as usual have fun alvin
Re: FTP-SSL
Quoting Xavier Santolaria ([EMAIL PROTECTED]): > why not use sftp(1) ? Why not use scp, optionally with the various graphical front-ends that exist on the client side? All known options for various OSes are included here: http://linuxmafia.com/pub/linux/security/ssh-clients (It's a great deal more universally supported than is sftp.) -- Cheers, Chaos, panic, & disorder - my work here is done. Rick Moen [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Alvin Oga ([EMAIL PROTECTED]): > otherwise secure windoze clients ... > ( winscp and equivalent ... > http://www.linux-sec.net/SSH/client.gwif.html#SFTP That's a listing of "MS Windows SSH Clients", and includes o SafeTP -- but that has no SSH support o CuteFTP -- but that has no SSH support (CuteFTP Pro does) o GlubTech Secure FTP -- but that has no SSH support o InterSoft International, Inc. SecureFTP -- but I see nothing suggesting it will support any SSH protocol, do you? o HostExplorer -- but that doesn't do SSH, just Kerberos. o SRP -- but that's not SSH at all Am I missing something? -- Cheers, "Transported to a surreal landscape, a young girl kills the first Rick Moen woman she meets, and then teams up with three complete strangers [EMAIL PROTECTED] to kill again." -- Rick Polito's That TV Guy column, describing the movie _The Wizard of Oz_
Re: FTP-SSL
Another non-free client is CuteFTP pro. It supports ftp-ssl, ftp-ssh, https and more ~kmag Yahoo wrote: Hi I am interesting to setup a ftp daemon with SSL option, which is an useful option ??? and I need some ftp-ssl client for windows 2000, is there anyone free ? Regards PD: Sorry because my english ___ Copa del Mundo de la FIFA 2002 El único lugar de Internet con vídeos de los 64 partidos. ¡Apúntante ya! en http://fifaworldcup.yahoo.com/fc/es/
Re: FTP-SSL
Quoting Xavier Santolaria ([EMAIL PROTECTED]): > Because sftp(1) understands a set of commands similar to those of > ftp(1). I'm unclear on why this is such an attraction, but whatever Works for Him[tm]. > It may also use many features of ssh. sftp is really an odd beast, which is part of why it's used so little. If you can get mileage out of "many features of ssh" within it, you're doing better than anyone else I know of. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Hi,
The SmartFTP windows client support ftp over ssl and is free for personal,
educational or non-comercial use. Its available for download at :
http://www.smartftp.com/download/
Its my favourite windows ftp client since i discover it, very pretty and
functional.
bye
Xavier Santolaria writes:
On Wed, Dec 18, 2002 at 03:38:22AM -0800, Rick Moen wrote:
> why not use sftp(1) ?
Why not use scp, optionally with the various graphical front-ends that
exist on the client side? All known options for various OSes are
included here: http://linuxmafia.com/pub/linux/security/ssh-clients
(It's a great deal more universally supported than is sftp.)
Because sftp(1) understands a set of commands similar to those of ftp(1).
It may also use many features of ssh.
I think it's easier for him.
just my 2 cents.
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
On Wed, Dec 18, 2002 at 10:53:45AM +0100, Yahoo wrote:
> I am interesting to setup a ftp daemon with SSL option,
> which is an useful option ???
> and I need some ftp-ssl client for windows 2000, is there anyone free ?
why not use sftp(1) ?
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
pgprCmjTZLT64.pgp
Description: PGP signature
Re: FTP-SSL
hi ya abelmmg On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Yahoo ([EMAIL PROTECTED]): > > > I am interesting to setup a ftp daemon with SSL option, which is an > > useful option ??? and I need some ftp-ssl client for windows 2000, is > > there anyone free ? just wondering... why not offer https instead of ftpssl ?? ( lot more ready-to-go https clients too ) otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP > I think the second question (almost) answers the first: The big > problem with offering ftp-ssl is the shortage of compatible client > software -- and all the puzzled e-mail from users who expect their > regular ftp software to work, and report "bugs" when it doesn't. > > On the server end, you can use Roxen Challenger or SSLftpd. And there > are probably other ways, too. c ya alvin
Re: FTP-SSL
> I am interesting to setup a ftp daemon with SSL option, > which is an useful option ??? > and I need some ftp-ssl client for windows 2000, is there anyone free ? You could try SSLftpd, it works fine for me. And as a client you could use Flashfxp from CEDsoft, which you may use for a 30 days period. And as far as I know there are no free ftp-ssl clients yet. -==- Regards, Marcel
Re: FTP-SSL
Quoting Yahoo ([EMAIL PROTECTED]): > I am interesting to setup a ftp daemon with SSL option, which is an > useful option ??? and I need some ftp-ssl client for windows 2000, is > there anyone free ? I think the second question (almost) answers the first: The big problem with offering ftp-ssl is the shortage of compatible client software -- and all the puzzled e-mail from users who expect their regular ftp software to work, and report "bugs" when it doesn't. On the server end, you can use Roxen Challenger or SSLftpd. And there are probably other ways, too. -- Cheers,There are only 10 types of people in this world -- Rick Moen those who understand binary arithmetic and those who don't. [EMAIL PROTECTED]
Re: FTP-SSL
On Wed, Dec 18, 2002 at 03:38:22AM -0800, Rick Moen wrote:
> > why not use sftp(1) ?
>
> Why not use scp, optionally with the various graphical front-ends that
> exist on the client side? All known options for various OSes are
> included here: http://linuxmafia.com/pub/linux/security/ssh-clients
>
> (It's a great deal more universally supported than is sftp.)
Because sftp(1) understands a set of commands similar to those of ftp(1).
It may also use many features of ssh.
I think it's easier for him.
just my 2 cents.
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
msg08239/pgp0.pgp
Description: PGP signature
Re: FTP-SSL
hi ya rick On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > otherwise secure windoze clients ... > > ( winscp and equivalent ... > > http://www.linux-sec.net/SSH/client.gwif.html#SFTP > > That's a listing of "MS Windows SSH Clients", and includes think you meant "FTP" section .. i've separated the ssh vs secure-ftp clients section ... i got tired of explaining the differences to some folks and just tell 'um to get winscp now dayz... - though i tend NOT to use either... i just see people using this or that... winscp being the lastest i saw that was really nice.. about 1.5yrs ago > o SafeTP -- but that has no SSH support yes.. > o CuteFTP -- but that has no SSH support (CuteFTP Pro does) yes... i was lazy.. dropped Pro... since usually windoze Pro versions are not free... and trail versions expire.. etc... - users shoudl be abel to figure it out?? > o GlubTech Secure FTP -- but that has no SSH support yup.. > o InterSoft International, Inc. SecureFTP -- but I see nothing > suggesting it will support any SSH protocol, do you? ah, yes... there's a test/beta version.. and i decided to list um anyway... since i didnt wanna update these files again > o HostExplorer -- but that doesn't do SSH, just Kerberos. kerberos is sometimes good enough ?? > o SRP -- but that's not SSH at all "This site serves as the semi-offical home of the SRP distribution, which contains secure versions of Telnet and FTP." and yes... its NOT ssh/ssl/kerberos... but decided to list it anyway > Am I missing something? nope... very good as usual have fun alvin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
FTP-SSL
Hi I am interesting to setup a ftp daemon with SSL option, which is an useful option ??? and I need some ftp-ssl client for windows 2000, is there anyone free ? Regards PD: Sorry because my english ___ Copa del Mundo de la FIFA 2002 El único lugar de Internet con vídeos de los 64 partidos. ¡Apúntante ya! en http://fifaworldcup.yahoo.com/fc/es/
Re: FTP-SSL
Quoting Xavier Santolaria ([EMAIL PROTECTED]): > why not use sftp(1) ? Why not use scp, optionally with the various graphical front-ends that exist on the client side? All known options for various OSes are included here: http://linuxmafia.com/pub/linux/security/ssh-clients (It's a great deal more universally supported than is sftp.) -- Cheers, Chaos, panic, & disorder - my work here is done. Rick Moen [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Alvin Oga ([EMAIL PROTECTED]): > otherwise secure windoze clients ... > ( winscp and equivalent ... > http://www.linux-sec.net/SSH/client.gwif.html#SFTP That's a listing of "MS Windows SSH Clients", and includes o SafeTP -- but that has no SSH support o CuteFTP -- but that has no SSH support (CuteFTP Pro does) o GlubTech Secure FTP -- but that has no SSH support o InterSoft International, Inc. SecureFTP -- but I see nothing suggesting it will support any SSH protocol, do you? o HostExplorer -- but that doesn't do SSH, just Kerberos. o SRP -- but that's not SSH at all Am I missing something? -- Cheers, "Transported to a surreal landscape, a young girl kills the first Rick Moen woman she meets, and then teams up with three complete strangers [EMAIL PROTECTED] to kill again." -- Rick Polito's That TV Guy column, describing the movie _The Wizard of Oz_ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Another non-free client is CuteFTP pro. It supports ftp-ssl, ftp-ssh, https and more ~kmag Yahoo wrote: Hi I am interesting to setup a ftp daemon with SSL option, which is an useful option ??? and I need some ftp-ssl client for windows 2000, is there anyone free ? Regards PD: Sorry because my english ___ Copa del Mundo de la FIFA 2002 El único lugar de Internet con vídeos de los 64 partidos. ¡Apúntante ya! en http://fifaworldcup.yahoo.com/fc/es/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
On Wed, Dec 18, 2002 at 10:53:45AM +0100, Yahoo wrote:
> I am interesting to setup a ftp daemon with SSL option,
> which is an useful option ???
> and I need some ftp-ssl client for windows 2000, is there anyone free ?
why not use sftp(1) ?
//xavier
--
Xavier Santolaria [EMAIL PROTECTED]
Alldas.org IT-Security Information Network [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
msg08232/pgp0.pgp
Description: PGP signature
Re: FTP-SSL
hi ya abelmmg On Wed, 18 Dec 2002, Rick Moen wrote: > Quoting Yahoo ([EMAIL PROTECTED]): > > > I am interesting to setup a ftp daemon with SSL option, which is an > > useful option ??? and I need some ftp-ssl client for windows 2000, is > > there anyone free ? just wondering... why not offer https instead of ftpssl ?? ( lot more ready-to-go https clients too ) otherwise secure windoze clients ... ( winscp and equivalent ... http://www.linux-sec.net/SSH/client.gwif.html#SFTP > I think the second question (almost) answers the first: The big > problem with offering ftp-ssl is the shortage of compatible client > software -- and all the puzzled e-mail from users who expect their > regular ftp software to work, and report "bugs" when it doesn't. > > On the server end, you can use Roxen Challenger or SSLftpd. And there > are probably other ways, too. c ya alvin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
> I am interesting to setup a ftp daemon with SSL option, > which is an useful option ??? > and I need some ftp-ssl client for windows 2000, is there anyone free ? You could try SSLftpd, it works fine for me. And as a client you could use Flashfxp from CEDsoft, which you may use for a 30 days period. And as far as I know there are no free ftp-ssl clients yet. -==- Regards, Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: FTP-SSL
Quoting Yahoo ([EMAIL PROTECTED]): > I am interesting to setup a ftp daemon with SSL option, which is an > useful option ??? and I need some ftp-ssl client for windows 2000, is > there anyone free ? I think the second question (almost) answers the first: The big problem with offering ftp-ssl is the shortage of compatible client software -- and all the puzzled e-mail from users who expect their regular ftp software to work, and report "bugs" when it doesn't. On the server end, you can use Roxen Challenger or SSLftpd. And there are probably other ways, too. -- Cheers,There are only 10 types of people in this world -- Rick Moen those who understand binary arithmetic and those who don't. [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
FTP-SSL
Hi I am interesting to setup a ftp daemon with SSL option, which is an useful option ??? and I need some ftp-ssl client for windows 2000, is there anyone free ? Regards PD: Sorry because my english ___ Copa del Mundo de la FIFA 2002 El único lugar de Internet con vídeos de los 64 partidos. ¡Apúntante ya! en http://fifaworldcup.yahoo.com/fc/es/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
