Newsgroups : Borland : borland.public.delphi.internet.winsock : 2005 Jul : Do I need a client certificate when using FTP over TLS?

www.cryer.info
Managed Newsgroup Archive

Do I need a client certificate when using FTP over TLS?

Subject:Do I need a client certificate when using FTP over TLS?
Posted by:"Bryan Feeney" (b.feen..@ncri.ie)
Date:Tue, 5 Jul 2005 16:15:41

I've written a program for the encryption and transmission of files.
They are encrypted locally and then transferred. Because FTP sends out
passwords in the clear, I chose to use FTP over TLS, to secure the
login. I'm using Indy 10, Delphi 2005, and the latest OpenSSL libraries.

I tested this in the office with some shareware Windows FTP servers, and
it seemed to work well in unsecured, implicit and explicit modes.

However, now that the time for deployment has arrived, we've asked the
company that runs our website to set up an FTP server. They chose vsftpd
running on SuSE Linux. They had a copy of our application to test things
with. Apparently, all secure connections were being being rejected as my
application wasn't providing a certificate to authenticate myself.

I'm afraid my knowledge of TLS is quite rusty, but I'd like to know how
come the Windows FTP clients were accepted the connection but vsftpd
doesn't.

Thanks
--
Bryan Feeney

Replies:

www.cryer.info
Managed Newsgroup Archive