This is what I prepared for hardy-proposed, not uploaded yet.

** Description changed:

  Binary package hint: vsftpd
  
  In FileZilla ftp Client when connecting to vsftpd 2.0.6  server with
  explicit TLS/SSL on HardyHeron:
  
  Status:       Server did not properly shut down TLS connection
  Błąd: Could not read from transfer socket: ECONNABORTED - Connection aborted
  
  On filezilla forum http://forum.filezilla-
  project.org/viewtopic.php?p=26923#p26923
  
  In release notice of vsftpd-2.0.7 http://vsftpd.beasts.org/ there is
  information about bugfix.
  
  Pleas rebuild new version of vsftpd in HardyHeron
+ 
+ -- SRU
+ 
+ 1) Explanation, rationale, and everything.
+ This is bug is fixed in intrepid as it is fixed in vsftpd 2.0.7.
+ It is a problem in the SSL connection shutdown code, which doesn't follow the 
standard. Clients such as recent FileZilla which decided to enforce SSL 
connections to be properly closed (because it is otherwise a security risk) now 
do not work with vsftpd 2.0.6 and other broken FTP servers. That means this bug 
potentially affects any standard-compliant client.
+ The person who fixed that bug in Fedora gave me their patch, which I applied. 
It is basically what was changed in 2.0.7 ssl code, modulo other changes we 
don't want in this SRU as they are not useful for fixing this bug.
+ 
+ 2) TEST CASE: Install vsftpd and configure it with ssl (certificate,
+ ssl_enable=yes), try connecting to it with a recent version of FileZilla
+ (eg. the one in intrepid) using ftpes://your_server and see it fails
+ with a message explaining the ssl shutdown problem. Now install the
+ proposed vsftpd package, you should be able to connect and
+ download/upload etc.

** Changed in: vsftpd (Ubuntu Hardy)
       Status: Confirmed => In Progress

** Attachment added: "hardy debdiff"
   http://launchpadlibrarian.net/18000525/vsftpd_2.0.6-1ubuntu1.1.debdiff

-- 
FTPS doesn't work with clients such as FileZilla
https://bugs.launchpad.net/bugs/254905
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to