On Wed, 19 Feb 2003, Tim McDaniels wrote:

> curl --sslv2 --verbose ftps://10.10.1.8:3021/ --user xxxx
> password:
> * About to connect() to 10.10.1.8:3021
> * Connected to 10.10.1.8 (10.10.1.8) port 3021
> * libcurl is now using a weak random seed!
>
> I get the results shown and the program hangs. Note that I get the same
> result with and without a certificate. Note that I can access the above
> server without ssl if I change a server parameter. The ftp server I am
> testing with is WS-FTP Server v3.14, it supports ftps over SSL (I recognize
> the ftps is not a standard).

Right, FTPS is not a standard and the way curl does it is using SSL only for
the control connection, leaving the data plainly unencrypted.

> Is curl's ftps imcompatible with WS-FTP Server using SSL and others (IBM
> Global Exchange Services)?

I think so. I'm off course welcoming all contributions that will make it work
better with these.

> Is it compliant with draft-murray-auth-ssl-10?

I'm not familiar with that draft, but I doubt that it is...

-- 
 Daniel Stenberg -- curl, cURL, Curl, CURL. Groks URLs.
-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge