112487 2005-11-14 02:11 0000 lftp-3.3.3 blocks at end of SSL transfer 2006-01-14 01:40:36 0000 1 1 1 Unclassified Gentoo Linux Applications unspecified All Linux RESOLVED FIXED P2 normal --- 1 spider@gentoo.org dragonheart@gentoo.org spider@gentoo.org 2005-11-14 02:11:42 0000 At least with USE="-gnutls" this version is unusable due to blocking and not closing ftp+ssl transfers at 100%. USE="gnutls" fails post-login while getting directory listings. (same as previous version, no big news) dragonheart@gentoo.org 2005-11-14 03:14:01 0000 Created an attachment (id=72866) patch from author this fix it? from the upstream email list spider@gentoo.org 2005-11-15 09:04:57 0000 Negative, doesn't fix the issue. mirror(0x8205ce0) enters state TARGET_REMOVE_OLD_FIRST mirror(0x8205ce0) enters state WAITING_FOR_TRANSFER mirror(0x8205ce0) enters state WAITING_FOR_TRANSFER ---> PASV <--- 227 Entering Passive Mode (IP.HIDDEN) ---- Connecting data socket to (IP.HIDDEN) port 30254 ---- Data connection established ---> STOR Filename <--- 150 Ok to send data. Certificate depth: 0; subject: HIDDEN WARNING: Certificate verification: self signed certificate WARNING: Certificate verification: certificate signature failure copy: get hit eof copy: waiting for put confirmation `Filename' at 1446486 (100%) eta:0s [Sending data/TLS] .... And stalls. appears the fix is only for "GET" not for "PUT" or other such targets. spider@gentoo.org 2005-11-20 09:42:36 0000 same with 3.3.4, its probably introduced with the 3.3.1 fix for empty files with ssl data protection enabled. dragonheart@gentoo.org 2005-11-22 11:34:22 0000 Created an attachment (id=73388) diff This is the patch the author created specifically for this bug dragonheart@gentoo.org 2005-11-23 11:44:21 0000 lftp-3.3.4-r1 fixes ssl transfer with above patch. Still need to work on the gnutls problem. spider@gentoo.org 2005-11-23 15:15:28 0000 Yep. The patch is confirmed and works. good job :) dragonheart@gentoo.org 2005-11-24 02:11:20 0000 is was all the Author's work thanks to your explanation. Is 'USE="gnutls" fails post-login while getting directory listings.' still a problem? What does "no big news" mean? spider@gentoo.org 2005-11-24 02:48:07 0000 No big news, in this case means that its not the first time I've seen this behaviour. gnutls has a tendency to be far pickier in implementations. ( fex, it reports a failure on self-signed certificates where O != $hostname, amongst other things ) I'll test gnutls post-login and other behaviour with the new version too. spider@gentoo.org 2005-11-24 02:53:39 0000 <--- 226 Directory send OK. **** gnutls_record_recv: A TLS packet with unexpected length was received. ---- Closing data socket ---- Closing control socket yep, still an issue with gnutls dragonheart@gentoo.org 2006-01-05 02:24:28 0000 from 3.4.0 release notes * treat GNUTLS_E_UNEXPECTED_PACKET_LENGTH as EOF indicator - this fixes secure ftp with ProFTPD server. maybe hopefully fixed although I haven't checked. Tim in bug 117810 thinks it is fixed. dragonheart@gentoo.org 2006-01-14 01:40:36 0000 assumed to be fixed - reopen if this isn't the case 72866 2005-11-14 03:14 0000 patch from author diff text/plain SW5kZXg6IGJ1ZmZlcl9zc2wuY2MKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpSQ1MgZmlsZTogL2hvbWUvbGF2L2N2c3Jv b3QvbGZ0cC9zcmMvYnVmZmVyX3NzbC5jYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS44CnJldHJp ZXZpbmcgcmV2aXNpb24gMS45CmRpZmYgLXUgLXAgLXIxLjggLXIxLjkKLS0tIGJ1ZmZlcl9zc2wu Y2MJMjggU2VwIDIwMDUgMDQ6Mzc6NDQgLTAwMDAJMS44CisrKyBidWZmZXJfc3NsLmNjCTI1IE9j dCAyMDA1IDEzOjUzOjQ5IC0wMDAwCTEuOQpAQCAtNTIsNiArNTIsOCBAQCBpbnQgSU9CdWZmZXJT U0w6OkRvKCkKICAgICAgIGJyZWFrOwogCiAgICBjYXNlIEdFVDoKKyAgICAgIGlmKGVvZikKKwkg cmV0dXJuIFNUQUxMOwogICAgICAgcmVzPUdldF9MTChHRVRfQlVGU0laRSk7CiAgICAgICBpZihy ZXM+MCkKICAgICAgIHsKSW5kZXg6IGJ1ZmZlci5jYwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvaG9t ZS9sYXYvY3Zzcm9vdC9sZnRwL3NyYy9idWZmZXIuY2MsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEu NDkKcmV0cmlldmluZyByZXZpc2lvbiAxLjUwCmRpZmYgLXUgLXAgLXIxLjQ5IC1yMS41MAotLS0g YnVmZmVyLmNjCTIyIEp1biAyMDA1IDA4OjA0OjIxIC0wMDAwCTEuNDkKKysrIGJ1ZmZlci5jYwky NSBPY3QgMjAwNSAxMzo1Mzo0OCAtMDAwMAkxLjUwCkBAIC0zODUsNiArMzg1LDggQEAgaW50IElP QnVmZmVyOjpEbygpCiAgICAgICBicmVhazsKIAogICAgY2FzZSBHRVQ6CisgICAgICBpZihlb2Yp CisJIHJldHVybiBTVEFMTDsKICAgICAgIHJlcz1HZXRfTEwoR0VUX0JVRlNJWkUpOwogICAgICAg aWYocmVzPjApCiAgICAgICB7CkBAIC00NDMsNiArNDQ1LDggQEAgaW50IElPQnVmZmVyU3RhY2tl ZDo6RG8oKQogCiAgICBjYXNlIEdFVDoKICAgICAgIG18PWRvd24tPkRvKCk7CisgICAgICBpZihl b2YpCisJIHJldHVybiBtOwogICAgICAgcmVzPUdldF9MTChHRVRfQlVGU0laRSk7CiAgICAgICBp ZihyZXM+MCkKICAgICAgIHsK 73388 2005-11-22 11:34 0000 diff diff text/plain SW5kZXg6IGxmdHBfc3NsLmNjCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9ob21lL2xhdi9jdnNyb290 L2xmdHAvc3JjL2xmdHBfc3NsLmNjLHYKcmV0cmlldmluZyByZXZpc2lvbiAxLjI0CmRpZmYgLXUg LXAgLXIxLjI0IGxmdHBfc3NsLmNjCi0tLSBsZnRwX3NzbC5jYwk4IE5vdiAyMDA1IDA3OjIxOjE4 IC0wMDAwCTEuMjQKKysrIGxmdHBfc3NsLmNjCTIyIE5vdiAyMDA1IDEyOjA3OjM0IC0wMDAwCkBA IC04NTEsNyArODUxLDcgQEAgYm9vbCBsZnRwX3NzbF9vcGVuc3NsOjpjaGVja19mYXRhbChpbnQg cgogCiBpbnQgbGZ0cF9zc2xfb3BlbnNzbDo6ZG9faGFuZHNoYWtlKCkKIHsKLSAgIGlmKFNTTF9p c19pbml0X2ZpbmlzaGVkKHNzbCkpCisgICBpZihoYW5kc2hha2VfZG9uZSkKICAgICAgIHJldHVy biBET05FOwogICAgaWYoaGFuZHNoYWtlX21vZGU9PVNFUlZFUikKICAgIHsKQEAgLTg3Myw2ICs4 NzMsNyBAQCBpbnQgbGZ0cF9zc2xfb3BlbnNzbDo6ZG9faGFuZHNoYWtlKCkKIAkgcmV0dXJuIEVS Uk9SOwogICAgICAgfQogICAgfQorICAgaGFuZHNoYWtlX2RvbmU9dHJ1ZTsKICAgIHJldHVybiBE T05FOwogfQogaW50IGxmdHBfc3NsX29wZW5zc2w6OnJlYWQoY2hhciAqYnVmLGludCBzaXplKQo=