Fazer uma PerguntaFazer uma Pergunta
 

RespondidoreqFTP.EnableSsl = true;

  • sábado, 2 de junho de 2007 18:03myNameIsRon Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     

    Hi,

    I'm using a hosting company that offers FTPS, but because the certificate is self signed it's coming up with an error.

    Is it possible to bypass the certificate error (exception) and still login? I notice that with other FTP programs (FileZilla), you can choose to trust the certificate if it doesn't pass inspection.

     

    thanks,

    Ron

Respostas

  • domingo, 3 de junho de 2007 21:40timvw Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido
    And which library are you using?

    (If installing your certificate as a trusted one isn't an option, for .Net libs you would use the  ServicePointManager.ServerCertificateValidationCallback to plugin your own validator...)
  • domingo, 3 de junho de 2007 22:29myNameIsRon Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido

     

    Hi timvw,

    Ops, yes that would have been a good thing to include Surprise)

    The certificate error is "Self Signed Certificate". I'm just trying to use FTP over SSL to protect my FTP login ID and Password.

     

    I'm using FtpWebRequest

    I kept looking, and as you said... ServicePointManager, I did find this code on the web... and it does seem to work.

    Is this the best way to go about it?

    ----------------------------------------------------------------------------------------------------------------------------

    ServicePointManager.ServerCertificateValidationCallback = AcceptAllCertificatePolicy;

     

    //Code to Accept All Certificates

    public static bool AcceptAllCertificatePolicy(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)

    {

    return true;

    }

     

    Thanks,

    Ron

  • segunda-feira, 4 de junho de 2007 5:26timvw Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido
    As long as you're not doing anything else your code would be enough... But I would probably only return true if the certificate is your own self-signed certificate and in all other cases rely on default validation...

Todas as Respostas

  • domingo, 3 de junho de 2007 21:40timvw Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido
    And which library are you using?

    (If installing your certificate as a trusted one isn't an option, for .Net libs you would use the  ServicePointManager.ServerCertificateValidationCallback to plugin your own validator...)
  • domingo, 3 de junho de 2007 22:29myNameIsRon Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido

     

    Hi timvw,

    Ops, yes that would have been a good thing to include Surprise)

    The certificate error is "Self Signed Certificate". I'm just trying to use FTP over SSL to protect my FTP login ID and Password.

     

    I'm using FtpWebRequest

    I kept looking, and as you said... ServicePointManager, I did find this code on the web... and it does seem to work.

    Is this the best way to go about it?

    ----------------------------------------------------------------------------------------------------------------------------

    ServicePointManager.ServerCertificateValidationCallback = AcceptAllCertificatePolicy;

     

    //Code to Accept All Certificates

    public static bool AcceptAllCertificatePolicy(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)

    {

    return true;

    }

     

    Thanks,

    Ron

  • segunda-feira, 4 de junho de 2007 5:26timvw Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     Respondido
    As long as you're not doing anything else your code would be enough... But I would probably only return true if the certificate is your own self-signed certificate and in all other cases rely on default validation...
  • sexta-feira, 3 de agosto de 2007 1:19just.a.nerd Medalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuárioMedalhas de usuário
     
     myNameIsRon wrote:

     

    I'm just trying to use FTP over SSL to protect my FTP login ID and Password.

     

     

    I wish, more people would do just that.

    And, in that case a self-signed certificate is just as good as one, that makes rich people richer !