Re: ftp-proxy and TLS

2005-09-02 Thread Toni Mueller
Hi, On Fri, 02.09.2005 at 00:26:36 +0200, Markus Wernig <[EMAIL PROTECTED]> wrote: > [...] I am also a bit undecided about the usefulness > | of such devices. > Erm ... wasn't it you to suggest "that the control channel could > be used to break end-to-end encryption into two pieces, originating or

Re: ftp-proxy and TLS

2005-09-01 Thread Kevin
On 9/1/05, Simon Farnsworth <[EMAIL PROTECTED]> wrote: > There's only two ways to get FTP+SSL past a firewall that would otherwise > filter it: > > 1) Drop firewalling for a range of ports used for FTP+SSL connections. For > example, open 65000-65535 for incoming, and configure your endpoints to l

Re: ftp-proxy and TLS

2005-09-01 Thread Markus Wernig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Toni Mueller wrote: | Hi, | | On Thu, 01.09.2005 at 19:29:57 +0200, Markus Wernig <[EMAIL PROTECTED]> wrote: | |>Squid is different. Usually, it doesn't do SSL itself, but just passes |>the connection on. | it does, however, talk SSL to the outside s

Re: ftp-proxy and TLS

2005-09-01 Thread Simon Farnsworth
On Thursday 01 September 2005 22:51, Toni Mueller wrote: > Hi, > > On Thu, 01.09.2005 at 19:29:57 +0200, Markus Wernig <[EMAIL PROTECTED]> wrote: > > Squid is different. Usually, it doesn't do SSL itself, but just passes > > the connection on. > > it does, however, talk SSL to the outside server. >

Re: ftp-proxy and TLS

2005-09-01 Thread Toni Mueller
Hi, On Thu, 01.09.2005 at 19:29:57 +0200, Markus Wernig <[EMAIL PROTECTED]> wrote: > Squid is different. Usually, it doesn't do SSL itself, but just passes > the connection on. it does, however, talk SSL to the outside server. > You might be able to code around that by terminating two distinct >

Re: ftp-proxy and TLS

2005-09-01 Thread Markus Wernig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Toni Mueller wrote: | I can't see why this must be so. HTTPS can be proxied with Squid which | "somehow" handles the crypto stuff after reading the client's "CONNECT | ...", and digging into FTP+SSL suggests that the control channel could | be used t

Re: ftp-proxy and TLS

2005-09-01 Thread Spruell, Darren-Perot
From: Toni Mueller [mailto:[EMAIL PROTECTED] > > moreover, when you think about it, ftp w/TLS encrypts the control > > channel, it's the entire point that 3rd parties (like > ftp-proxy) can't > > see or modify what's gpoing on, so this cannot possibly work. > > I can't see why this must be so.

Re: ftp-proxy and TLS

2005-09-01 Thread Toni Mueller
Hi, On Fri, 19.08.2005 at 12:41:20 +0200, Henning Brauer <[EMAIL PROTECTED]> wrote: > ftp-proxy does not support TLS. ok. > moreover, when you think about it, ftp w/TLS encrypts the control > channel, it's the entire point that 3rd parties (like ftp-proxy) can't > see or modify what's gpoing o

Re: ftp-proxy and TLS

2005-08-19 Thread Henning Brauer
* Marc Peters <[EMAIL PROTECTED]> [2005-08-19 12:29]: > when i try to ftp everything is working fine. but when i try to connect > to a host, which is running proftpd with TLS activated, ftp-proxy cuts > off when TLS begins to work ftp-proxy does not support TLS. moreover, when you think about i