Skip to content

Negotiate the FTPS data channel protection level - #979

Open
slachiewicz wants to merge 1 commit into
masterfrom
agent/wagon-ftps-data-protection-master
Open

Negotiate the FTPS data channel protection level#979
slachiewicz wants to merge 1 commit into
masterfrom
agent/wagon-ftps-data-protection-master

Conversation

@slachiewicz

Copy link
Copy Markdown
Member

Master counterpart of #978, cherry-picked clean. See #651 for the report and #978 for the reasoning behind the default.

Verified on this branch: mvn test -pl wagon-providers/wagon-ftp -am → 27 tests, 0 failures. spotless:check passes.

This change was created with AI assistance.

An FTPS session encrypted only on the control channel is refused by any
server that requires protection, with "425 Server requires protected data
connection". PROT can only be sent once authenticated, hence the post-login
hook rather than more work in createClient. The default is P because a
caller asking for FTPS is asking for a protected transfer; set
dataChannelProtection to C, or empty to send no PROT at all, for the
previous behaviour.
@slachiewicz slachiewicz added the bug Something isn't working label Sep 3, 2026
@slachiewicz
slachiewicz marked this pull request as ready for review September 3, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant