At least with USE="-gnutls" this version is unusable due to blocking and not closing ftp+ssl transfers at 100%. USE="gnutls" fails post-login while getting directory listings. (same as previous version, no big news)
Created attachment 72866 [details, diff] patch from author this fix it? from the upstream email list
Negative, doesn't fix the issue. mirror(0x8205ce0) enters state TARGET_REMOVE_OLD_FIRST mirror(0x8205ce0) enters state WAITING_FOR_TRANSFER mirror(0x8205ce0) enters state WAITING_FOR_TRANSFER ---> PASV <--- 227 Entering Passive Mode (IP.HIDDEN) ---- Connecting data socket to (IP.HIDDEN) port 30254 ---- Data connection established ---> STOR Filename <--- 150 Ok to send data. Certificate depth: 0; subject: HIDDEN WARNING: Certificate verification: self signed certificate WARNING: Certificate verification: certificate signature failure copy: get hit eof copy: waiting for put confirmation `Filename' at 1446486 (100%) eta:0s [Sending data/TLS] .... And stalls. appears the fix is only for "GET" not for "PUT" or other such targets.
same with 3.3.4, its probably introduced with the 3.3.1 fix for empty files with ssl data protection enabled.
Created attachment 73388 [details, diff] diff This is the patch the author created specifically for this bug
lftp-3.3.4-r1 fixes ssl transfer with above patch. Still need to work on the gnutls problem.
Yep. The patch is confirmed and works. good job :)
is was all the Author's work thanks to your explanation. Is 'USE="gnutls" fails post-login while getting directory listings.' still a problem? What does "no big news" mean?
No big news, in this case means that its not the first time I've seen this behaviour. gnutls has a tendency to be far pickier in implementations. ( fex, it reports a failure on self-signed certificates where O != $hostname, amongst other things ) I'll test gnutls post-login and other behaviour with the new version too.
<--- 226 Directory send OK. **** gnutls_record_recv: A TLS packet with unexpected length was received. ---- Closing data socket ---- Closing control socket yep, still an issue with gnutls
from 3.4.0 release notes * treat GNUTLS_E_UNEXPECTED_PACKET_LENGTH as EOF indicator - this fixes secure ftp with ProFTPD server. maybe hopefully fixed although I haven't checked. Tim in bug 117810 thinks it is fixed.
assumed to be fixed - reopen if this isn't the case
