FTP Connect to servers that use either Implict SSL or SSH
lazarus / 38-Networking and Web Programming

----------------------------------------------------------------------
Gizmo · 2015-02-23 23:14

I have an Apple Mac server that has FTP enabled by way of SSH using
port 22. I can connect to it fine using the FireFTP Firefox FTP plugin
by specifying sFTP in the encryption setting.

I have another server that uses "Implict SSL (Good)" using port 990
which I think is frost or similar. I can connect to that too, using
FireFTP.

I have created a small demo project to see if I can connect using my
own application. I have the Synpase library and the two DLL's in my
project. All compiles. But I just cannot get it to connect. Code
below. When I connect using FireFTP, I am asked if I want to accept
and store the certificate. Could this be the problem? My code has no
way to say "User, do you want to accept the certificate?". Is there a
way to achieve this? In Delphi, such connections like easy
(http://www.example-code.com/delphi/ftp_ImplicitSSL.asp) but I am
really struggling with what I had assumed would be an easy task.

----------------------------------------------------------------------
snorkel · 2015-03-11 16:13

For synapse and SFTP over port 22 you will have to use the cryptlib
plugin.   I believe there are examples if you google it.

If you don't mind purchasing a comercial lib, securebridge from Devart
is really good and can handle all your SSH SFTP needs.

Now FTPS  (standard ftp over SSL) is another story.   I don't know if
synapse can do that for you easily.

It can do standard FTP no problem but the SSL adds a bunch of stuff
like implicit and explicit connections and things like passive port
ranges.
I think most FTP servers do the explicit SSL connections which uses
dynamic data ports instead of port 990,  I think implicit is
considered legacy.

You might want to ask on the Synapse mailing list.

----------------------------------------------------------------------
Gizmo · 2015-03-11 19:48

Thanks Snorkel. Since posting, I have discovered SecureBlackBox by
Eldos. Have used the evaluation version and got connections working.
Looking at buying a license - costs about the same as Devart solution.
Ta