FTPeS, FTPS, Explicit FTP over SSL/TLS

[jimdunn]

It’s been a long time since I recommended FTPS to the community… this article (FTPeS (Working Solution on Debian with Virtualmin/Webmin) | Virtualmin) is from 2013.

Since then nearly EVERY ftp product has now included FTPS as a transfer option.

Of course, using OpenSSL always allows for FTPS testing:

openssl s_client -connect example.com:21 -starttls ftp

FTPS may also be called one of the following:

	- AuthSSL
	- AuthSSL-Explicit
	- AuthTLS
	- AuthTLS-Explicit
	- Explicit FTP over SSL/TLS
	- FTP over SSL/TLS Explicit
	- FTP-ES
	- FTP-SSL/TLS
	- SSL/TLS Explicit

Here are a few other notes with sites:

FileZilla
FTP over TLS - FileZilla Wiki
QUICKCONNECT: use “FTPES://” server prefix
or
SITEMANAGER: use PROTOCOL of “FTP” and ENCRYPTION of “Require Explicit FTP over TLS”

WinSCP
FTPS :: WinSCP
select “FTP” and “TLS Explicit Encryption”

CoreFTP
Connecting to a FTP server
Site Manager → PASV: enable → Connection: AuthTLS
→ SSL Options → SSL Listings: enabled
→ SSL Options → - SSL transfer: enabled
SAVE

FireFTP (Firefox Add-in)
http://fireftp.net/
CONNECTION TAB → Security: AuthTLS(Best)
SAVE
(To bypass certificate warnings)

• click the YOU CAN ADD AN EXCEPTION button
• click the ADD EXCEPTION button
• click the GET CERTIFICATE button
• check the box for PERMANENTLY STORE THIS EXCEPTION
• click the CONFIRM SECURITY EXCEPTION button

SmartFTP
SmartFTP - What is the difference between Implicit TLS and Explicit TLS?
select “SSL Explicit”

WS_FTP LE and PRO (Home doesn’t support FTPS)
http://www.wsftple.com/
http://www.ipswitchft.com/products/ws_ftp_pro/
Connection Wizard → Connection Type → FTP/SSL (AUTHSSL) → ADVANCED
→ ADVANCED → USE PASSIVE MODE FOR DATA CONNECTIONS: enable
→ ADVANCED:SSL → USE TLSv1 ONLY: enable
→ ADVANCED:SSL → USE UNENCRYPTED COMMAND CHANNEL AFTER SSL AUTH: disabled
→ ADVANCED:SSL → USE UNECRYPTED DATA CHANNEL: disabled
SAVE

FlashFXP
FlashFXP Secure FTP, FTP/SSL, SFTP, FTPS, FTP...So what's the difference?
select “FTP using Explicit SSL (Auth TLS)”

Cyberduck (MAC)
http://cyberduck.ch/
change the protocol selection in the bookmark to “FTP-SSL”

FTPS Command-Line
http://ftps.codeplex.com/
Alex FTPS is a free FTP/FTPS client
Example of upload/download a local file with control and data channel SSL/TLS encryption
ftps.exe -h dunn1.com -U username -P password -ssl DataChannelRequired -sslInvalidServerCertHandling Accept -p c:\test.txt /folder/
ftps.exe -h dunn1.com -U username -P password -ssl DataChannelRequired -sslInvalidServerCertHandling Accept -g /folder/test.txt d:\

CURL Command-Line
Upload example:
curl.exe -T test.txt -u username:password ftp://dunn1.com/folder/
Download example:
curl.exe --ftp-ssl -u username:password ftp://dunn1.com/folder/test.txt