Changelog confusion

Need help with FileZilla Client? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
xeon
226 Transfer OK
Posts: 128
Joined: 2009-08-19 03:18

Changelog confusion

#1 Post by xeon » 2014-11-05 17:41

Hello,

I noticed something a bit confusing in the changelog. One of the entries suggests that SSLv3 support was disabled, yet some later changes check for AUTH SSL support. Wouldn't this be pointless if there's no SSLv3 support?
Changelog for FileZilla 3 (4596 changes):
2014-10-15 09:42 codesquid, revision 6124
M /FileZilla3/trunk/src/engine/tlssocket.cpp
Disable SSLv3
2014-11-03 09:58 codesquid, revision 6159
M /FileZilla3/trunk/src/engine/ftpcontrolsocket.cpp
M /FileZilla3/trunk/src/engine/servercapabilities.h
Remember whether AUTH TLS/SSL worked, though don't act on this yet.

User avatar
botg
Site Admin
Posts: 33242
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Changelog confusion

#2 Post by botg » 2014-11-06 08:12

AUTH SSL tells the server to initiate a SSL/TLS handshake. This command does not mean only SSL can be used.

The only difference betwee AUTH TLS and AUTH SSL is the name and that some older servers don't support the former.

User avatar
boco
Contributor
Posts: 25334
Joined: 2006-05-01 03:28
Location: Germany

Re: Changelog confusion

#3 Post by boco » 2014-11-07 13:14

The command used does not determine the TLS version. Both AUTH TLS and AUTH SSL are just aliases, the do the same. The latter command is just kept for legacy backwards-compatibility reasons.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

Post Reply