HOW: SSL/SSH connection ??

  • Thread starter Thread starter Kristijan Marin
  • Start date Start date
K

Kristijan Marin

Hi,

I have a project to do, that has to transfer files over SSL/SSH
connection.(FTP over SSL or some other method)
I searched a lot but didn't find anything usefull :((

Has anyone any clues how to do that ??

Thank you.
Kris
 
Hi,

Well I need to create an app that will transfer files from one computer to
another.
I need to use these two protocols : FTP, SSH./SSL

I know how to do it for FTP ( i use CFtpConnection) but don't have a clue
how
can I achieve that using SSL/SSH.

I saw some "FTP over SSH/SSL" notes but none was of any use.

I don't even know where to start ..... do I have to transfer files in SSL
byte by byte ?
Do I need client-server application or can I create only my client and the
system takes over on the other side. I don't know. Never did anything with
SSL.

My program will be run from Windows platform.

Or is there any other option to do it like CFTConnection does it.

Thanks a lot for help.

Kris
 
I have a project to do, that has to transfer files over SSL/SSH
connection.(FTP over SSL or some other method)
I searched a lot but didn't find anything usefull :((
Click to expand...
SFTP might be what you are looking for (its FTP over SSH I think)
 
SSL/SSH is not a protocole to send files, it is a way to encryp stream and
dercryp the stream side server. And it is SSL or SSH.


Y can not really send a file with SSL/SSh, you can send a file by FTP encryp
by SSL or by SSh.
For SSL, did you try to put a url like "ftps://" (means ftp+ssl)
For SSH, the best thing it is to use a third application (nammed ssh
agent )like putty as FilleZilla (open source projet)does but I think it is
more expensive in time.
 
Kristijan said:
Hi,

I have a project to do, that has to transfer files over SSL/SSH
connection.(FTP over SSL or some other method)
I searched a lot but didn't find anything usefull :((

Has anyone any clues how to do that ??
Click to expand...

A couple of resources:

www.openssl.org

OpenSSL is an open source library that provides SSL/SSH facilities.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthn/security/sspi.asp

SSPI is the part of the Windows Platform SDK that you'd use to build and SSH
program using the built-in Windows security providers.

http://en.wikipedia.org/wiki/SSH_file_transfer_protocol

A description of SFTP. SFTP is a file transfer protocol that operates
through an SSH tunnel. It's not really related to FTP.

http://winscp.net/eng/index.php

WinSCP is an open-source SFTP client for Windows.

http://en.wikipedia.org/wiki/FTPS

FTPS is standard FTP over an SSL connection.

http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html

Some up to date references on ftps.

And finally

www.google.com

where you could have found all of the above yourself with a few keystrokes
and a mouse-click or two.

-cd
 
SSL and SSH are different thing. SSH uses SSL to secure/encrypt data.

There is no quick and easy way to programmatically implement secure
communication in Windows. Implementing secure communication using SSL in
C/C++ requires a lot of work and a good understand of SSL but the effort is
worthed it because there are still not many programmers who can write secure
programs. O'Reily has a very good SSL book. The book also has sample codes on
how to implement secure communication with SSL.

Traditionally, SSH is for Unix based systems but there is also a free SSH
client that works in Windows. It's called PUTTY. However, PUTTY only
implements the client side of SSH (ie. you can only initiate secure
communication to a secure server).

Although SFTP has commands that look like the traditional FTP command, under
the hood SFTP and FTP are completely different. You cannot take a ftp program
and change it to a SFTP program without major rewriting the code.

Implementing secure communication is much easier in Java because there are a
lot of built-in classes for secure communication in Java.

In short, you have to do a lot of study before you can write production
grade SSL programs in C/C++.
 
I have not heard of Zeus Editor before but I did checked it out briefly after
you mentioned it. My first impression of the product is very good, it has a
lot of features. However, I cannot find the secure ftp feature that you
talked about. After snooping around a bit, I can only find the support for
file transfer over ftp and http. I also failed to get the editor to connect
to a ssh server. I did see the openssl dll libeay32.dll and ssleay32.dll in
the zeus program folder.

anyway, if a programmer can write feature rich programs like Zeus editor,
he/she should not have much trouble writing programs that support secure
communication.

Good job on the editor.
 
My first impression of the product is very good

Thank you :)
However, I cannot find the secure ftp feature that
you talked about.
Click to expand...

You will have noticed FTP editing is done using the "File,
FTP" menu.

Now when a file is opened the server name is detemined by
splitting the ftp file name. Zeus then uses the server name
to determine the type of connection required.

But if no server details have been defined Zeus resorts to
the standard FTP protocol with a logon prompt.

So to answer your question, the reason the connection was
only FTP is because the server name was not known to Zeus.

To define a server use the "Options, Editor Options" menu
and in the "FTP Hosts" panel just define the server and
select the required SSL/SSH/TLS protocol.

For example if this is the FTP file name:

ftp://ftp.microsoft.com/example/index.html

the server name would be:

ftp.microsoft.com

There are more details on defining servers in the Zeus
online help. Just search for "ftp".
Good job on the editor.
Click to expand...

Thanks again :)

Jussi Jumppanen
Author: Zeus for Windows Programmer's Editor
 
Back
Top