Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 117506 - net-ftp/ftp-0.17-r3 passive mode not working with ssl enabled
Summary: net-ftp/ftp-0.17-r3 passive mode not working with ssl enabled
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: AMD64 Linux
: High normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-01-02 16:07 UTC by Stefan Salewski
Modified: 2011-09-17 07:27 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
New Ebuild following Debian Upstream (ftp-0.17-r23.ebuild.tar.gz,5.44 KB, application/gzip)
2011-09-15 17:58 UTC, Jonathan
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Salewski 2006-01-02 16:07:24 UTC
My Gentoo AMD64 box is connected to internet via a DSL-Router
(FRITZ!Box Fon WLAN 7050 (UI), Firmware-Version 14.03.88).
I tried to connect to my homepage hosted at www.all-inkl.com:

stefan@Salewski1 ~ $ ftp salewskis.de
Connected to salewskis.de.
220 ProFTPD 1.2.10 Server ready.
Name (salewskis.de:stefan): xxxxxxx
234 AUTH SSL successful
[SSL Cipher EDH-RSA-DES-CBC3-SHA]
331 Password required for xxxxxxx.
Password:
230 User xxxxxxx logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
500 Illegal PORT command
ftp: bind: Address already in use
ftp> passive
Passive mode on.
ftp> ls
227 Entering Passive Mode (83,133,48,113,202,39).
150 Opening ASCII mode data connection for file list

receive aborted
waiting for remote to finish abort
ssl_getc: SSL_read failed -1 = 9
421 Service not available, remote server has closed connection
ssl_getc: SSL_read failed -1 = 9
421 Service not available, remote server has closed connection
ftp> exit
stefan@Salewski1 ~ $
Active and passive ftp was not working!
After reemerging
# USE="-ssl" emerge ftp
without ssh-support ftp works well!

Best regards

Stefan Salewski
Comment 1 Urs Joss 2008-06-23 08:50:21 UTC
exactly the same situation here.

=== snip ===
urs@dusis ~ $ ftp XXX.YY.ZZZ
Connected to XXX.YY.ZZZ (AA.BBB.CCC.D).
220 (vsFTPd 2.0.3)
234 Proceed with negotiation.
[SSL Cipher DES-CBC3-SHA]
331 Please specify the password.
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
500 Illegal PORT command.
ftp: bind: Die Adresse wird bereits verwendet
ftp> pa
Passive mode on.
ftp> ls
227 Entering Passive Mode (AA.BBB.CCC.D,215)
150 Here comes the directory listing.
rssl_getc: SSL_read failed -1 = 0
421 Service not available, remote server has closed connection
=== snap ===

Connecting to that site using the ftp protocol in konqueror works. Stunningly the DOS ftp command has no issues either.

Thanks and kind regards
Urs

=== snip === 
$ emerge --info
Portage 2.1.4.4 (default-linux/x86/2007.0/desktop, gcc-4.1.2, glibc-2.6.1-r0, 2.6.25-gentoo-r5 i686)
=================================================================
System uname: 2.6.25-gentoo-r5 i686 Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz
Timestamp of tree: Mon, 23 Jun 2008 04:47:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p33
dev-java/java-config: 1.3.7, 2.1.6
dev-lang/python:     2.5.2-r4
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r2
sys-devel/automake:  1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=nocona -O2 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/4.0/env /usr/kde/4.0/share/config /usr/kde/4.0/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=nocona -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks fixpackages metadata-transfer parallel-fetch sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox"
GENTOO_MIRRORS="ftp://mirror.switch.ch/mirror/gentoo/ ftp://ftp.solnet.ch/mirror/Gentoo "
LANG="de_CH.UTF-8"
LC_ALL="de_CH.UTF-8"
LINGUAS="de en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/voip /usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa apache2 bash-completion battery berkdb bluetooth bzip2 cairo cddb cdr cli cpufreq cracklib crypt cups dbus dell dga dri dvd dvdr dvdread emboss encode evo exif fam fbcon ffmpeg firefox flac gdbm gif gpm gstreamer hal htmlhandbook iconv idn ieee1394 irda isdnlog ithreads java5 jpeg kde kerberos lcms lm_sensors lzo mad md5sum midi mikmod mmx mp3 mpeg mudflap musepack ncurses nls nptl nptlonly nvidia obex ogg opengl openmp oss pam pcre pdf perl png postscript pppd python qt qt3 qt3support qt4 quicktime rar readline real reflection sasl sdl session smartcard smp spell spl sse sse2 ssl ssse3 svg tcpd tetex theora threads tiff truetype unicode usb v4l v4l2 vesa vga vgdev vim-syntax vorbis wifi win32codecs wmf x264 x86 xcomposite xinerama xml xorg xv zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de en" USERLAND="GNU" VIDEO_CARDS="nvidia vesa fbdev"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
=== snap ===
Comment 2 Matthias Luft 2008-10-06 15:14:35 UTC
same thing here...


-------------

emerge --info
Portage 2.1.4.4 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.26-gentoo-r1 i686)
=================================================================
System uname: 2.6.26-gentoo-r1 i686 Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz
Timestamp of tree: Fri, 03 Oct 2008 11:05:01 +0000
app-shells/bash:     3.2_p33
dev-java/java-config: 1.3.7, 2.1.6
dev-lang/python:     2.5.2-r7
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r2
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1-r1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=prescott -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=prescott -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LC_ALL="en_US.utf8"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X acl acpi alsa bash-completion berkdb cli cracklib crypt cups dbus dri fortran gdbm gpm hal hardened iconv isdnlog jpeg midi mmx mudflap ncurses nls nptl nptlonly nvidia openmp pam pcre perl pppd python readline reflection session spl sse sse2 ssl startup-notification tcpd tetex unicode x86 xorg xscreensaver zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="nvidia"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Comment 3 Willard Dawson 2010-05-19 04:24:50 UTC
Ditto.  I have net-ftp/ftp-0.17-r7 installed.

Does not work:

ftp -p ip-address-of-server

Does work:

ftp -p -z nossl ipaddress-of-server

However, `ls -lR` does not recurse.  I've not tried that on other servers where passive is required, so maybe that is expected...??
Comment 4 Willard Dawson 2010-05-19 04:26:20 UTC
(In reply to comment #3)
> Ditto.  I have net-ftp/ftp-0.17-r7 installed.
> 
> Does not work:
> 
> ftp -p ip-address-of-server
> 
> Does work:
> 
> ftp -p -z nossl ipaddress-of-server
> 
> However, `ls -lR` does not recurse.  I've not tried that on other servers where
> passive is required, so maybe that is expected...??
> 

Sorry for omitting this info:

# emerge --info
Portage 2.1.8.3 (default/linux/amd64/10.0, gcc-4.3.4, glibc-2.11.1-r0, 2.6.33-gentoo-r2 x86_64)
=================================================================
System uname: Linux-2.6.33-gentoo-r2-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T7250_@_2.00GHz-with-gentoo-2.0.1
Timestamp of tree: Wed, 19 May 2010 01:00:01 +0000
app-shells/bash:     4.1_p5
dev-java/java-config: 2.1.11
dev-lang/python:     2.6.5-r2, 3.1.2-r3
dev-python/pycrypto: 2.1.0
dev-util/cmake:      2.8.1-r1
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.6.1-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.65
sys-devel/automake:  1.8.5-r4, 1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.3.4, 4.4.3-r2
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.33
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA PUEL dlj-1.1 Nessus-EULA sun-bcla-java-vm"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X a52 aac acl acpi aiglx alsa amd64 amr apache2 apm arts ati audiofile avahi avi bash-completion berkdb bitmap-fonts bluetooth bzip2 cairo caps cardbus cdio cdr cli consolekit cracklib crypt ctype cups cxx dba dbtool dbus dcc_video digitalradio diskio djvu dri dts dvd dvdread eds emboss encode esd ethereal exif expat fastbuild fax ffmpeg fftw fglrx flac foomaticdb force-cgi-redirect fortran ftp fuse gamin gd gdbm gif glib glitz glut gmp gnutls gphoto2 gpm gstreamer gtk gtk2 gtkhtml guile hal iconv idn imlib ipv6 ithreads jack java java-nsplugin jpeg kde kerberos kqemu laptop lcms ldap libclamav libg++ libwww lirc live lm_sensors lua mad madwifi matroska mdnsresponder-compat memlimit mhash mikmod mmx mmxext mng modules mono motif mozilla mp3 mpeg mudflap multilib mysql ncurses netboot netjack networking nforce2 nls nptl nptlonly nsplugin nvidia ocaml ogg oggvorbis opencore-amr opengl openmp oss pam pango pch pcmcia pcre pdf pdflib pear perl php pmu png policykit portaudio posix pppd python qt qt3support qtmt quicktime readline reflection ruby samba sasl scanner sdl semantic-desktop session simplexml slang sndfile snmp soap sockets spell spl sql sqlite sse sse2 ssl svg sysfs tcl tcltk tcpd theora threads threadsafe tiff tk tokenizer truetype truetype-fonts type1-fonts udev unicode usb utempter vorbis wddx webkit wifi xanim xinerama xml xmlrpc xorg xscreensaver xsl xulrunner xv zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" CAMERAS="canon" ELIBC="glibc" FOO2ZJS_DEVICES="hp2600n" INPUT_DEVICES="evdev keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

Comment 5 Jonathan 2011-09-15 17:58:07 UTC
Created attachment 286567 [details]
New Ebuild following Debian Upstream

This is a new ebuild which follows the Debian upstream patchset for this application.

It also includes a patch to allow the package use flags to continue to be relevant.
Comment 6 Jonathan 2011-09-15 18:00:04 UTC
I have confirmed that this bug still exists for package version ftp-0.17-r7

However, the bug does not exist on the Debian version of this package. 

Also, the Debian version of this package is under active development, whereas this package appears to be stagnant.

I have attached an ebuild which will apply the patches from the latest stable version of this package from Debian (0.17.23+0.2-1). I have also included a patch to allow the configure program to accept the appropriate options for the use flags.

I have tested this on my system, and it compiles and runs perfectly.
Comment 7 SpanKY gentoo-dev 2011-09-17 06:33:48 UTC
not all of our fixes are integrated though
Comment 8 SpanKY gentoo-dev 2011-09-17 07:27:32 UTC
should be all set now in the tree; thanks for the report!

Commit message: Migrate to Debian patchset for more fixes
http://sources.gentoo.org/net-ftp/ftp/ftp-0.17.23.0.2.1.ebuild?rev=1.1