<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Actually, this would make more sense:<br>
</p>
<p><br>
</p>
<div><span style="font-family: 'Courier New', monospace;">[ftps-implicit]</span></div>
<div><span style="font-family: 'Courier New', monospace;"> send "quit\r\n"</span></div>
<div><span style="font-family: 'Courier New', monospace;"> expect "220"</span></div>
<div><span style="font-family: 'Courier New', monospace;"> options ssl,banner</span></div>
<div><span style="font-family: 'Courier New', monospace;"> port 21</span></div>
<div><br style="font-family: 'Courier New', monospace;">
</div>
<div><span style="font-family: 'Courier New', monospace;">[ftps|ftps-explicit]</span></div>
<div><span style="font-family: 'Courier New', monospace;"> send "quit\r\n"</span></div>
<div><span style="font-family: 'Courier New', monospace;"> expect "220"</span></div>
<div><span style="font-family: 'Courier New', monospace;"> options ssl,banner</span></div>
<div><span style="font-family: 'Courier New', monospace;"> port 990</span><br>
</div>
<div><br>
</div>
<div>=G=<br>
</div>
<p><br>
</p>
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Xymon <xymon-bounces@xymon.com> on behalf of Galen Johnson <Galen.Johnson@sas.com><br>
<b>Sent:</b> Friday, December 18, 2015 1:19 PM<br>
<b>To:</b> Jeremy Laidman; Japheth Cleaver; xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] ftps tests</font>
<div> </div>
</div>
<div>
<p>Well, I was able to get it to connect using <br>
</p>
<p><br>
</p>
<p><em style="font-family:'Courier New',monospace"><span style="font-family:'Courier New',monospace">openssl s_client -starttls ftp -crlf -connect remote.host:21</span></em><br>
</p>
<p><br>
</p>
<p>This dumps the cert as expected...<br>
</p>
<p><br>
</p>
<p>It should work the same as ftp/ftpd only using implicit ftps. That said, I would have thought ftps would have worked but I expect under the covers xymonnet is just doing something different. I doubt adding the following stanza would help:<br>
</p>
<p><br>
</p>
<div><span style="font-family:'Courier New',monospace">[ftpstls]</span></div>
<div><span style="font-family:'Courier New',monospace"> send "quit\r\n"</span></div>
<div><span style="font-family:'Courier New',monospace"> expect "220"</span></div>
<div><span style="font-family:'Courier New',monospace"> options ssl,banner</span></div>
<div><span style="font-family:'Courier New',monospace"> port 21</span><br>
</div>
<p><br>
</p>
<p>Any thoughts on how we might be able to integrate this?<br>
</p>
<p><br>
</p>
<p>=G=<br>
</p>
<p><br>
</p>
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Xymon <xymon-bounces@xymon.com> on behalf of Galen Johnson <Galen.Johnson@sas.com><br>
<b>Sent:</b> Friday, December 18, 2015 1:03 PM<br>
<b>To:</b> Jeremy Laidman; Japheth Cleaver; xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] ftps tests</font>
<div> </div>
</div>
<div>
<p>Actually, it may not be as bad as all that. openssl already supports this. Not 100% sure but I thought Xymon leveraged that for the ssl connections. I'm looking at <a href="https://www.madboa.com/geek/openssl/">https://www.madboa.com/geek/openssl/</a>.
The syntax is not exactly correct there but I'm currently trying to amend it. Looking at <a href="https://www.openssl.org/docs/manmaster/apps/s_client.html">https://www.openssl.org/docs/manmaster/apps/s_client.html</a>, the openssl s_client supports starttls
for ftp (<em>Currently, the only supported keywords are "smtp", "pop3", "imap", "ftp", "xmpp", "xmpp-server", and "irc."</em>)<br>
</p>
<p><br>
</p>
<p>=G=<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Jeremy Laidman <jlaidman@rebel-it.com.au><br>
<b>Sent:</b> Thursday, December 17, 2015 10:16 PM<br>
<b>To:</b> Galen Johnson; Japheth Cleaver; xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] ftps tests</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div class="gmail_quote">
<div dir="ltr">On Fri, Dec 18, 2015 at 9:06 AM Galen Johnson <<a href="mailto:Galen.Johnson@sas.com">Galen.Johnson@sas.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#ffffff; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>oh...well I guess that would explain it :-). It seems like it would be a useful function since starttls is a common implementation for various services (like ldaps...I would hope it handles that).</p>
</div>
</blockquote>
<div>I agree that this would be useful. However it's probably not trivial to implement. Each protocol (FTP, LDAP, SMTP, etc) has its own dialogue to go through before the STARTTLS command can be issued, as well as negotiations to determine whether STARTTLS
is supported, and how to handle in the negative. These protocols don't even use the same command (POP uses "STLS", for example).</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>