It is currently Tue Mar 19, 2024 6:42 am


All times are UTC


Forum rules


Please click here to view the forum rules



Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: secure ftp
PostPosted: Thu Oct 04, 2018 3:25 pm 
Getting Started
Getting Started

Joined: Wed Jun 07, 2006 1:34 am
Posts: 67
I have ftp access at ftp.freehostia.com, but I wondered if you provide any method of securely (encrypted) uploading files? I guess sftp is not an option because it uses ssh and you don't grant ssh access. What about ftps (ftp over ssl)?

Thanks


Top
 Profile  
 
 Post subject: Re: secure ftp
PostPosted: Tue Oct 09, 2018 3:39 pm 
Getting Started
Getting Started

Joined: Wed Jun 07, 2006 1:34 am
Posts: 67
I received an answer to my support request.

In short: FTPS is supported with Explicit TLS (AUTH TLS command is issued on a regular FTP session to upgrade it to a secure one).
To quickly test (on a Mac):
Code:
curl -u <username> -v --ssl-reqd ftp://ftps.freehostia.com

You can also use hosts ftps[1-5].us.freehostia.com but due to the wildcard certificate *.freehostia.com you will also need to supply the '--insecure' flag to ignore certificate validation.

Here's the full reply from the support ticket:
Quote:
FTP/S commonly runs on port 990 and sometimes on port 21, the primary difference being that port 990 is an Implicit FTP/S, and port 21 is an Explicit FTP/S. If a client connects to an FTP/S server on port 990, the assumption is that the client intends to perform SSL. Therefore, the SSL handshake takes place immediately; it is referred to as Implicit because the port number implies security. FTP clients who connect on port 21 and intend to use SSL for security will need to take the extra step to explicitly state their intentions by sending an AUTH SSL or AUTH TLS command to the server. Once the server receives this command, the two parties perform an SSL handshake and enter a secure state—hence why port 21 is referred to as Explicit. This allows the client the opportunity to activate greater security when necessary, or speed the process up on less security-sensitive file transfers.


Top
 Profile  
 
 Post subject: Re: secure ftp
PostPosted: Sat Jan 05, 2019 11:20 am 
Newbie
Newbie

Joined: Thu Oct 29, 2009 4:05 am
Posts: 12
"you will also need to supply the '--insecure' flag to ignore certificate validation."

doesnt this imply that the connection will not be secure, if the certificate is not going to be validated?

also is it possible to use these settings to connect via Filezilla?
also why isnt this information in the FAQ? if it is, i couldnt find it anywhere

cheers!

_________________
Customize Facebook with FBP: https://fbpurity.com


Top
 Profile  
 
 Post subject: Re: secure ftp
PostPosted: Sat Jan 05, 2019 5:22 pm 
Site Admin

Joined: Sat May 31, 2008 1:56 am
Posts: 497
Please open a trouble ticket from your account with us and provide us so we will be able to review this case for you and assist you further. You will be able to do this via the Open a New Ticket button of your account control panel Help Center section at the top right corner in Hosting Control Panel.

_________________
Best Regards,
Miles
ModeratorsTeam
Freehostia.com


Top
 Profile  
 
 Post subject: Re: secure ftp
PostPosted: Mon Jan 07, 2019 9:49 pm 
Getting Started
Getting Started

Joined: Wed Jun 07, 2006 1:34 am
Posts: 67
steve123 wrote:
doesnt this imply that the connection will not be secure, if the certificate is not going to be validated?

The connection will still be encrypted, but, yes, the certificate will not be validated. If you want to ensure security then use the top level hostname ftps.freehostia.com. I was only providing the others for completeness.

Yes FileZilla supports it.


Top
 Profile  
 
 Post subject: Re: secure ftp
PostPosted: Tue Mar 19, 2019 12:21 pm 
Newbie
Newbie

Joined: Mon Mar 18, 2019 10:16 am
Posts: 1
sparky_132 wrote:
steve123 wrote:
doesnt this affordable teeth whitening kits list imply that the connection will not be secure, if the certificate is not going to be validated?

The connection will still be encrypted, but, yes, the certificate will not be validated. If you want to ensure security then use the top level hostname ftps.freehostia.com. I was only providing the others for completeness.

Yes FileZilla supports it.


So with freehostia you get everything, including the certificate validation?


Last edited by VernonM on Sat Nov 11, 2023 8:28 pm, edited 2 times in total.

Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ]  Moderators: Moderators, Support Team

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Hosting | Domains | Servers | Extras | Order | Support | Contacts | FreeHostia © 2011