Chapter 7. Compatible TLS-enabled FTP Clients

Table of Contents

Linux, Unix Clients.
lftp
C-Kermit
ftp-tls
Mac OS X
lftp
C-Kermit
Microsoft Windows Clients.
CoreFTP LE
FlashFXP
Kermit 95
SmartFTP

This chapter provides some information about FTP client software that supports TLS secured control connections and has been tested and found to be compatible with the MSS FTP Service. The information in this chapter should not be considered as an endorsement for any specific commercial FTP Client package.

CISL does not normally supply precompiled versions of FTP clients due to the varying security policies at remote sites. Please ask your local system administrator for assistance in installing a compatible FTP client. In particular, you are responsible for complying with any licensing and use restrictions. Additional FTP Client software packages that might work are listed at http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html#client.

Note

Newer versions of FTP Clients may break compatibility with the MSS FTP Service. CISL does not have the resources to test each program on an ongoing basis. Also, CISL can not provide consultation on FTP Client software that we have not seen, but can only tell you how that software is interacting with the MSS FTP Service.

Linux, Unix Clients.

lftp

The lftp program has superior error recovery and scriptability.

Homepage http://lftp.yar.ru/
Tested Version 3.5.14
Build Notes Enable SSL support if you are external to the UCAR security perimeter.
Usage Notes Set the following parameters either in your $HOME/.lftprc file or while running lftp:
set net:timeout 1800
For external users, also set the following parameters:
set ftp:ssl-force yes
set ssl:verify-certificate no

C-Kermit

Homepage http://www.columbia.edu/kermit/ck80.html
Tested Version 8.0.212 Dev.26
Build Notes

8.0.212 is the first version to support large files (> 2 GB).

For Mac OS X, you may need to add -DCK_SSL to the compile defines and -lssl -lcrypto to the link libraries if there is not a predefined make target for an SSL enabled executable.

Usage Notes
set auth tls verify off
set ftp authtype tls
set ftp data-protection-level clear
ftp open mssftp.ucar.edu

ftp-tls

Note

Use of the ftp-tls program is not encouraged if you can use the lftp program instead.
Homepage http://www.ford-hutchinson.com/~fh-1-pfh/ftp-tls-20051021.tar.gz
Tested Version 20051021
Build Notes Compile with -D_FILE_OFFSET_BITS=64 to enable large file (> 2 GB) support.
Usage Notes
ftp -z certsok mssftp.ucar.edu

Warning

Newer versions of ftp-tls have a "progress meter". This must be disabled or the data transfers will fail.