<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Actually, it may not be as bad as all that. openssl already supports this. Not 100% sure but I thought Xymon leveraged that for the ssl connections. I'm looking at <a href="https://www.madboa.com/geek/openssl/">https://www.madboa.com/geek/openssl/</a>.
The syntax is not exactly correct there but I'm currently trying to amend it. Looking at <a href="https://www.openssl.org/docs/manmaster/apps/s_client.html">https://www.openssl.org/docs/manmaster/apps/s_client.html</a>, the openssl s_client supports starttls
for ftp (<em>Currently, the only supported keywords are "smtp", "pop3", "imap", "ftp", "xmpp", "xmpp-server", and "irc."</em>)<br>
</p>
<p><br>
</p>
<p>=G=<br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Jeremy Laidman <jlaidman@rebel-it.com.au><br>
<b>Sent:</b> Thursday, December 17, 2015 10:16 PM<br>
<b>To:</b> Galen Johnson; Japheth Cleaver; xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] ftps tests</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div class="gmail_quote">
<div dir="ltr">On Fri, Dec 18, 2015 at 9:06 AM Galen Johnson <<a href="mailto:Galen.Johnson@sas.com">Galen.Johnson@sas.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#ffffff; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>oh...well I guess that would explain it :-). It seems like it would be a useful function since starttls is a common implementation for various services (like ldaps...I would hope it handles that).</p>
</div>
</blockquote>
<div>I agree that this would be useful. However it's probably not trivial to implement. Each protocol (FTP, LDAP, SMTP, etc) has its own dialogue to go through before the STARTTLS command can be issued, as well as negotiations to determine whether STARTTLS
is supported, and how to handle in the negative. These protocols don't even use the same command (POP uses "STLS", for example).</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>