FTP/TLS: All the goodies 

FTP/TLS is a big part of my job. It's an exciting time for the protocol because after years sitting around as a commonly used draft standard, it's just been promoted to a standards track RFC.

Pretty much all you could need to know about FTP/TLS (TLS being the current Right Way to refer to SSL) is at the RFC author's "FTP/TLS State of Play" page. http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html

It covers things like the difference between SFTP (SSH) and FTPS (SSL) (although instead of discussing the merits of either, it links to another page) … and has a long (but not comprehensive) list of clients.

However, the OP asks about implicit SSL. The IETF frowns on implicit SSL, and the FTP/TLS standard negotiates TLS implicitly (with "AUTH TLS").

Some of the listed clients may support implicit SSL however. I suspect WS-FTP does, for example.

by slim

What about SSH certs and Rsync 

I have to transfer files and directories across several locations, and I do it automatically using rsync and SSH certificates.

SSH is configured to only allow transfers with a valid certificate from a valid IP address. There is no pass-phrase on the certs.

Copying / syncing directories is a breeze:

rsync -ae ssh server1:/copy/this/directory/ /to/this/directory

No fuss. I have not tried rsync on win32, but I am sure it exists. I do a lot of web development, but have not used a ftp client on a regular basis in years. My sites are backed up to remote servers using this method, and new sites are uploaded using rsync as well.

Its fast, easy to use and saves on bandwidth, as only changes are transfered. With FTP the whole file is always moved. SO bandwidth savings alone may be worth looking into this solution.

by madstork2000

documented on: 2006.06.14

Secured Ftp Clients 

native debian packages 

filezilla - Port of the famous Win32 graphical FTP client
ftp-ssl - The FTP client with SSL or TLS encryption support
ftpd-ssl - FTP server with SSL encryption support
kftpgrabber - ftp client for KDE
sitecopy - A program for managing a WWW site via FTP, DAV or HTTP
pure-ftpd - Pure-FTPd FTP server
wzdftpd - A portable, modular, small and efficient ftp server


$ acpl curl
  Installed: 7.13.2-2sarge5
  Candidate: 7.13.2-2sarge5
  Version Table:
     7.15.3-2 0
         40 http://debian.yorku.ca unstable/main Packages
     7.15.3-1 0
         80 http://debian.yorku.ca testing/main Packages
 *** 7.13.2-2sarge5 0
        900 http://debian.yorku.ca sarge/main Packages
        900 http://mirror.direct.ca sarge/main Packages
        900 http://security.debian.org sarge/updates/main Packages
        100 /var/lib/dpkg/status
$ acsh tclcurl
Version: 0.15.3-1
Description: Tcl bindings to libcurl
 This module enables the use of libcurl in Tcl scripts. Please refer to
 the libcurl documentation available in the libcurl3-gnutls-dev package.
 NOTE: the SSL support is provided by GnuTLS.
 Homepage: http://personal1.iddeo.es/andresgarci/tclcurl/english/index.html
Tag: devel::library, filetransfer::ftp, filetransfer::http, langdevel::tcl, made-of::lang:tcl, protocol::ftp, protocol::http, protocol::ssl, role::sw:shlib
Version: 0.12.2-3
Depends: libc6 (>= 2.3.2.ds1-4), libcurl3 (>= 7.12.2-1), libidn11 (>= 0.5.2), libssl0.9.7, zlib1g (>= 1:1.2.1)



SSL connect    AUTH SSL        AUTH TLS
        YES    YES             YES

Works with:

Firefox         1.5 - 2.0       ALL

feature needed 

by pencil , Jun 13, 2006

don't support chinese,also, a queue feature is needed

Usinig Secured Ftp 


sudo debfoster ftp-ssl

ftp or lftp with SSL/TLS 


Mlist: [UCLA-LUG]
Date: Jan 4 2005
> Not surprisingly, I can no longer ftp to www.bol.ucla.edu now that
> there's SSL/TSL in place. If I do
> $ ftp www.bol.ucla.edu
> ...username and password I get
> 550 SSL/TLS required on the control channel
> Login failed.
> and if I try with lftp I get
> [Connecting...]
> [Receiving data]


set ftp:ssl-force true
connect www.bol.ucla.edu
login <username>

that works with lftp 3.0.11. it should work with releases as early as 2.4.9 (my copy of 2.4.9 isn't linked to openssl so i can't verify, but the man page suggests that it should work).

i've also verified that access works with the standard netkit ftp with the ssl/tls patches applied. check and see if you have ftp-ssl, or if /usr/bin/ftp is linked to libssl.


ftp or lftp with SSL/TLS 

> I tried what you suggested and it still didn't work. I don't have
> ftp-ssl; How can I check if my /usr/bin/ftp is linked to libssl? Thanks
> for your help Chris!
ldd /usr/bin/ftp

i would guess that you don't have an ssl-linked ftp client. in my testing, i did have some problems that were cured by forcing the client to use passive mode. that is especially likely to help out if you're trying to ftp from behind a device that is doing nat. you could try

set ftp:passive-mode true
set ftp:ssl-force true
connect www.bol.ucla.edu
login <username>