Re: Client-Server Protocol in a more secure way?

On 12/16/2016 4:07 PM, Lee Howard wrote:
> On 12/16/2016 10:29 AM, James Cloos wrote:
>> The obvious update would be to add an AUTH TLS command, per rfc 4217.
>>
>> That probably would require support for FEAT, per rfc 2389.
>
> ... and I haven't looked into it, specifically, but I would suspect 
> that there are already system libraries available (maybe openssl, 
> even) which would do the bulk of the work.  It's just going to require 
> that someone take the time to add it all in.
>
> Then you still need to do the same to the client software.

Lee, James, Karsten,

Very few lines of code should be needed to run Secure FTP.

For the SFTP client: Here's a discussion, with code, showing how to use 
libssh2 to make an SFTP client.  As you may know, SFTP is really just SSH.
http://stackoverflow.com/questions/2919797/good-simple-c-c-ftp-and-sftp-client-library-recommendation-for-embedded-linux

For the SFTP server: libssh (not libssh2) can be used, it's the same 
library which powers SFTP and SSH for github, Linux KDE desktop secure 
file sharing, X2go, etc.
https://www.libssh.org/
Or, sftp-server can be used as a Subsystem declaration option, in 
sshd_config.
https://linux.die.net/man/8/sftp-server

-- 
Chris Coleman
Espace LLC


____________________ HylaFAX(tm) Developers Mailing List ____________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe [email protected] < /dev/null