Securing FTP with TLS (FTPS [SSL/TLS])

Something you want to see in a LiveCode product? Want a new forum set up for a specific topic? Talk about it here.

Moderator: Klaus

Post Reply
rol4leg
Posts: 7
Joined: Mon Jul 31, 2006 8:22 pm

Securing FTP with TLS (FTPS [SSL/TLS])

Post by rol4leg » Tue Dec 04, 2007 1:06 pm

I was wondering if Runtime Revolution was worker on adding features
to make Revolution Studio native for Securing FTP with TLS (FTPS [SSL/TLS])?
I'm using Revolution Studio version 2.8.1 build 472.
Is FTPS [SSL/TLS] native to Revolution Enterprise?

And I was wondering if there is anybody that worked with the command:
open secure socket [to] host[:port[|ID]] [with message callbackMessage]
[with|without verification] [using certificate certificate and key key]

specially the part: [using certificate certificate and key key]
and if that command is only for https?
We should always attempt to find freedom in ourselves, by loosening the ties from your conditioned thoughts and emotions.

BvG
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 1239
Joined: Sat Apr 08, 2006 1:10 pm
Contact:

Post by BvG » Tue Dec 04, 2007 9:01 pm

The socket commands are suitable for any protocol, be it smtp, http or ftp. However, you have to implement any protocol wholly yourself when using the socket stuff. This (and the fact that there are several suitable but incompatible protocols for secured ftp) is also why there is currently no ftps, and only https in rev.

So feel free to implement the ftp protocol from scratch :)
Various teststacks and stuff:
http://bjoernke.com

Chat with other RunRev developers:
chat.freenode.net:6666 #livecode

rol4leg
Posts: 7
Joined: Mon Jul 31, 2006 8:22 pm

Post by rol4leg » Tue Dec 04, 2007 11:21 pm

acknowledged! Thanks!

Mark Smith
Posts: 179
Joined: Sat Apr 08, 2006 11:08 pm
Contact:

Post by Mark Smith » Thu Dec 06, 2007 4:16 am

Another issue is that Studio does not support the ssl library (secure sockets or https) out of the box. There is (was) a paid-for add on, but they announced that they would no longer be offering it last year, though it seems to be still available at the RunRev store.

One way round it is that if you have openSSL installed on your machine, you can use it's s_client app to open secure sockets. This will involve opening the s_client app as a process, and then reading and writing to it as you would with a socket.

It's a bit involved, but I've been having some success with it. if you're on OS X, you'll need the current 2.9 beta, as 'open process' is broken on previous versions.

Here's a manual page for s_client:

http://leaf.dragonflybsd.org/cgi/web-ma ... &section=1

The call would be something like:

put "openssl s_client <various options> <host:port>" into tProc
open process tProc for binary update

If this is successful, you can now

write someData to process tProc
read from process tProc until empty
close process tProc

Best,

Mark

rol4leg
Posts: 7
Joined: Mon Jul 31, 2006 8:22 pm

Post by rol4leg » Fri Dec 07, 2007 4:41 pm

thanks!
We should always attempt to find freedom in ourselves, by loosening the ties from your conditioned thoughts and emotions.

Post Reply