Page 1 of 1

AndFTP does not implement SSL session reuse

Posted: Wed Nov 23, 2011 9:19 am
by mburger
I would like to use AndFTP to connect to a server that provides FTPS via vsftpd.

Since February 2009, vsftpd enforces SSL session reuse for security reasons.

Unfortunately, AndFTP does not implement SSL session reuse between the control and data connection, which results in log messages like

Code: Select all

DEBUG: Client "n.n.n.n", "No SSL session reuse on data channel."
on the server and AndFTP throwing an exception whenever an upload is supposed to start.

Are there any plans to implement SSL session reuse?

Re: AndFTP does not implement SSL session reuse

Posted: Fri Nov 25, 2011 9:52 pm
by support
Yes, we've tried but it seems there is a problem in socket layer provided by Android OS for socket re-use.

Re: AndFTP does not implement SSL session reuse

Posted: Sat Nov 26, 2011 8:15 am
by mburger
support wrote:Yes, we've tried but it seems there is a problem in socket layer provided by Android OS for socket re-use.
Is there any corresponding entry in Android's issue tracker? If not, could you create a new issue there, please?

Re: AndFTP does not implement SSL session reuse

Posted: Sat Nov 26, 2011 8:18 am
by mburger
mburger wrote:Is there any corresponding entry in Android's issue tracker? If not, could you create a new issue there, please?
Seems there is no such entry; however, this might help: http://stackoverflow.com/q/5672013/66981