Bug 66117

Summary: SSL support in ftp kioslave
Product: [Frameworks and Libraries] frameworks-kio Reporter: Mattias Hermansson <mattias>
Component: FTPAssignee: David Faure <faure>
Status: CONFIRMED ---    
Severity: wishlist CC: alex.bikadorov, asn, forums, glua, hfischer, kdelibs-bugs, lemaitre.dulotus, luktheluckyboy, mail, mss, myemail.1, nate, nixpenguin, pastas4, phobosk, rafael.rodriguez.tf, rcabane, rdieter, simonandric5, sl1pkn07, solitone, stefan, teuniz, thoebert, thomas.bettler, zerg2000-bugs.kde.org
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: screenshot tls handshake warning

Description Mattias Hermansson 2003-10-16 15:45:15 UTC
Version:            (using KDE KDE 3.1.4)

I'd like to propose that you implement FTP/TLS as defined in these documents:

http://www.rfc-editor.org/rfc/rfc2228.txt
http://www.ietf.org/internet-drafts/draft-ietf-ftpext-mlst-12.txt

Implementing these further enhances an already high level of security in KDE. Encryption is something which should be enabled as often as possible.
Comment 1 George Staikos 2003-10-20 04:44:58 UTC
It requires TCPSlaveBase support in kio_ftp first.  Implementing all the SSL stuff separately in kio_ftp would be aweful.
Comment 2 Chelsea Buchanan & Keith Briscoe 2004-07-27 03:55:50 UTC
I just wanted to let KDE developers know about the Kasablanca project (http://kasablanca.berlios.de/).  I have no relationship with this project but it may be helpful to collaborate and incorporate this into an sftp:// IOSlave or the existing ftp:// IOSlave.

sftp:// is nice (great in fact) but it doesn't work everywhere.  There really aren't a lot of good free FTP over SSL client implementations out there and I think this would be a great addition to Konqueror.

In the meantime, the TLSWrap project (http://tlswrap.sunsite.dk/) provides a client-side TLS proxy so you can connect to FTP/SSL-only sites using Konqueror.
Comment 3 Chelsea Buchanan & Keith Briscoe 2004-07-27 03:58:41 UTC
Er,

FTP over SSL is ftps://
Secure file transfer via SSH2 is sftp://

Sorry, I always screw that up even when I try to be careful.
Comment 4 Waldo Bastian 2004-09-22 16:48:40 UTC
Updated URL:
http://www.ietf.org/proceedings/00dec/I-D/draft-ietf-ftpext-mlst-12.txt
Although I don't see what that has to do with SSL because it doesn't mention it at all.
Comment 6 Helga Fischer 2005-08-22 12:36:34 UTC
Hello,

it would be fine, if ftp over ssl would supported by konqueror. All can I do, I do with konqueror. Unfortunatley my provider doesn't support sftp (ssh!), so I have to use my passwords unencrypted.

I hope you find time to develop that feature.


Thanks in advance,
Helga Fischer
Comment 7 Sebastian Wiedenroth 2005-12-15 22:57:43 UTC
Hi,

if implemented it would be great if you would also support SSCN for fxp transfers as i suggested here ( -> http://bugs.kde.org/show_bug.cgi?id=66113 ).

Thanks :)
Comment 8 David Anderson 2006-02-20 14:42:48 UTC
http://kasablanca.berlios.de/kio-ftps/
Comment 9 Thiago Macieira 2006-04-14 21:27:08 UTC
*** Bug 125473 has been marked as a duplicate of this bug. ***
Comment 10 Thiago Macieira 2006-04-24 01:38:42 UTC
*** Bug 125984 has been marked as a duplicate of this bug. ***
Comment 11 Luk van den Borne 2006-04-24 10:25:28 UTC
Are there any plans to implement this great KIO?
Comment 12 Thiago Macieira 2006-04-26 18:22:26 UTC
Not by me.
Comment 13 Thomas Neumann 2006-05-30 00:40:07 UTC
Just to elaborate on Comment #8 (that just contains a link without text):
There already is a working ftps kioslave package. It would be nice if it could be integrated into KDE though.
Comment 14 Thiago Macieira 2006-06-04 10:58:44 UTC
I've never been contacted by any developer of kio_ftps.
Comment 15 David Faure 2006-10-30 19:05:58 UTC
*** Bug 136517 has been marked as a duplicate of this bug. ***
Comment 16 David Anderson 2007-01-27 12:37:06 UTC
Are any of the developers motivated to look at http://kasablanca.berlios.de/kio-ftps/ to see if it's code that could be incorporated into KDE? Blurb sounds promising - it builds on the existing kio slave:

"An ftps KIO slave for KDE, based on rfc4217 and build upon the ftp KIO-slave sources. it should work yet with most server implementations. it issues an "AUTH TLS" command after connecting and refuses to continue, when it's not supported. in prior to every data channel io command ("STOR", "RETR", etc) it tries to secure the data channel via "PBSZ" and "PROT" commands. if that fails it will transfer data unencrypted. there is currently no support for ssl-certificates. this might be added on demand.

Sounds like the work's already done - it just needs someone with developer skills to review it for inclusion.

License is GPL.
Comment 17 Luk van den Borne 2007-06-22 11:00:26 UTC
There's one catch with that project (which is also mentioned in the blurb): there's no support for SSL certificates, which renders this KIOSlave unusable for me.
Comment 18 Jekyll Wu 2012-01-02 04:31:28 UTC
*** Bug 186875 has been marked as a duplicate of this bug. ***
Comment 19 Dawit Alemayehu 2012-03-05 16:44:21 UTC
*** Bug 234282 has been marked as a duplicate of this bug. ***
Comment 20 Gustavo Alvarez 2012-11-07 18:49:03 UTC
any plans to support FTPES (FTP over Explicit TLS/SSL) in dolphin? (like FTP and FTPS)?
Comment 21 Gustavo Alvarez 2013-04-10 10:13:58 UTC
any notice to support FTPES (FTP over Explicit TLS/SSL) in dolphin/Kio?
Comment 22 Teunizz 2013-06-19 18:39:22 UTC
Any progress here?

Many webhosters don't allow SFTP for filetransfer.
Instead, FTPS can be used (http://en.wikipedia.org/wiki/FTPS).

Please add this feature to Dolphin.
Comment 23 Stefan 2013-06-21 07:09:55 UTC
(In reply to comment #22)
> Any progress here?
> 
> Many webhosters don't allow SFTP for filetransfer.
> Instead, FTPS can be used (http://en.wikipedia.org/wiki/FTPS).
> 
> Please add this feature to Dolphin.

(In reply to comment #16)
> Are any of the developers motivated to look at
> http://kasablanca.berlios.de/kio-ftps/ to see if it's code that could be
> incorporated into KDE? Blurb sounds promising - it builds on the existing
> kio slave

FTPS is already added to Dolphin with this a/m kio slave.
E.g. in Ubuntu it is already available as "official" package, the package's name is kio-ftps.

Since there is no support for ftpEs this Bug should remain open.
Comment 24 werner 2013-09-13 17:11:06 UTC
Created attachment 82317 [details]
screenshot tls handshake warning
Comment 25 werner 2013-09-13 17:13:11 UTC
well, true, ftps is currently available, but as mentioned earlier (comment #17), at least barly usable, as it spits out multiple warnings on each connect (see attachment),
over and over again.
would be great if this could at least be confirmed for a known site, so not pop up next time anymore.
Comment 26 Gustavo Alvarez 2014-01-20 20:34:31 UTC
Hi, again

any notice to support FTPES (FTP over Explicit TLS/SSL) in dolphin/Kio?

greetings
Comment 27 solitone 2017-01-30 09:46:19 UTC
(In reply to Stefan from comment #23)
> FTPS is already added to Dolphin with this a/m kio slave.
> E.g. in Ubuntu it is already available as "official" package, the package's
> name is kio-ftps.

Although there is to be some support in KDE SC 4 (but please see comment #17, it doesn't work very well apparenlty), there is no FTPS support in Plasma / KF 5, as kio-ftps has not been ported to 5. Thus this is still a missing feature at the moment.
Comment 28 Sorin Postelnicu 2017-05-29 21:52:48 UTC
The berlios link is no longer working, but it seems this guys started porting this kio-ftps to KF5:
https://github.com/Akimkin/kf5-kio-ftps
Comment 29 Robert Cabane 2017-08-17 09:01:51 UTC
Hello, 
I'm also in need of an FTPES connection by means of Dolphin, which is actually undoable. It works with nautilus of pcmanfm, however, but I prefer to use Dolphin.