Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

No Format
<nio-listener name="default" implicit-ssl="true">

If you set the listener to use implicit security, enabling implicit security for the data connection should be considered.

Data connection security

Implicit secure socket listener does not ensure encrypted data transfer. To use SSL/TLS in data connection, client either has to send "PROT P" command . You also need to set the SSL configuration parameters as described below. or implicit security must be enabled for the data connection.

No Format

<data-connection implicit-ssl="true">

If no explicit configuration for SSL keystores and truststores is provided for the data connection, it will be inherited from the listener. This is the normal configuration.

Different FTP clients behave different with regards to implicit security on the data connection, some assume an SSL enabled socket, while some will always send a "PROT P" command. The following table shows the characteristics of some clients, please report others.

FTP client

Behavior

FileZilla

Sends "PROT P" command automatically in implicit security mode

DartFTP/PowerTCP

Assumes an SSL enabled data connection, does not send "PROT P"

Detailed configuration

Full documentation on all provided configuration is available on the Listeners page