Originally posted by: Staar

I'm having trouble connecting to ftp sites that require 128 bit encryption. In the ftp command line I have:

-tv -PV -URL "ftp://<user>:<password>@<site>:21/<SubFolder>/test.txt" -SPROTO SSLv2 -SYS WIN32 -STR STRONG

Does anyone know what STRONG, WEAK, ANY translate to for the encryption strength? What is 128 bit considered?

We host the ftp site so I know it supports SSL v1 and v2.

The root folder on the site does not require encryption but the subfolder I'm trying to access does require 128 bit encryption. The adapter trace reads:

FTP Adapter, Version 8.0(105)
Copyright © 2004, Ascential Software Corporation. All rights reserved
Built for WIN32 - INTEL on Jan 31 2006 at 17:49:13.
Microsoft (R) C Runtime Library is
Copyright (C) Microsoft Corp. 1981-1999.
Using C:\WINNT\system32\MSVCRT.dll (Version 6.10.9844.0) for Visual C++ runtime.
Retry Count is 0. Retry Interval is 0. OnFailure is Rollback.
Fetch Unit is 0. Card Mode is Integral.
Will process 40 bytes of data.
Run Started at 16:54:49.969 on 12/07/06.
Options used: trace,verbose,name,sys,pasv,url,sproto,str
URL ftp://<user>:*****@<site>:21/<SubFolder>/test.txt will be used.
WSAStart: Entering
WSAStart: bWSStarted = 1, nWSClients = 17
Sockets Client ID 18 enabled.
WSAStart: Exiting (rc = 1)
URL user: '<user>'.
URL pass: '*********'.
URL host: '<site>'.
URL port: '21'.
URL path: '<SubFolder>/test.txt'.
URL type: 'I'.
Using ftp: protocol.
Server host is '<site>'.
Hostname: '<site>'.
Address #1: <IP Address>.
Using port '21' for the connection.
Connecting to '<site>'.
Checking user port 21.
Service: 'ftp'.
Port: 21.
Protocol: 'tcp'.
Socket Opened.
Connected.
>220 <site> X2 WS_FTP Server 5.0.5 (1840031322) (S)
<USER <user>

>331 Password required (S)
<PASS
>230 user logged in (S)
Setting DOS/WIN-specific parameters.
<CWD <SubFolder>

>550 <SubFolder>: folder not found (F)
<CWD <SubFolder>

>550 <SubFolder>: folder not found (F)
<REIN

>220 Service ready for new user (S)
<QUIT

>221 Good-Bye (S)
Socket Closed.
Connection closed.
Run Terminated at 16:54:49.985 on 12/07/06.
Any help would be greatly appreciated!

#IBM-Websphere-Transformation-Extender
#DataExchange
#IBMSterlingTransformationExtender

Originally posted by: janhess

Have you got the security option installed? it's necessary for ssl2.
#IBM-Websphere-Transformation-Extender
#IBMSterlingTransformationExtender
#DataExchange

Originally posted by: Staar

Yes. I was going to try and reinstall it to see if that resolves the problem.
The ReadMe file stated that it had to be installed after the Event Agent.

Originally we installed the products in the following order:
Design Studio
DSTX
DSTX Extended Edition
DSTX Management Tools
DSTX Development Kit
DSTX Event Agent
DSTX Security Collection
Commerce Manager
DSTX Packs

Hopefully reinstalling it will solve the problem...
#DataExchange
#IBM-Websphere-Transformation-Extender
#IBMSterlingTransformationExtender

Originally posted by: Staar

Still failed, but the trace looks better...
FTP Adapter, Version 8.0(105)
Copyright © 2004, Ascential Software Corporation. All rights reserved
Built for WIN32 - INTEL on Jan 31 2006 at 17:49:13.
Microsoft (R) C Runtime Library is
Copyright (C) Microsoft Corp. 1981-1999.
Using C:\WINNT\system32\MSVCRT.dll (Version 6.10.9844.0) for Visual C++ runtime.
Retry Count is 0. Retry Interval is 0. OnFailure is Rollback.
Fetch Unit is 0. Card Mode is Integral.
Will process 40 bytes of data.
Run Started at 10:03:25.062 on 12/08/06.
Options used: trace,verbose,name,sys,pasv,url,sproto,str
URL ftp://<user>:*****@<site>:21/<folder>/test.txt will be used.
WSAStart: Entering
WSAStart: bWSStarted = 0, nWSClients = 0
WSAStart: Attempting WinSock initialization.
WSAStart: WinSock initialized successfully.
Windows Sockets Version 1.1 will be used.
Windows Sockets Version 2.2 is supported.
Windows Socket Description is 'WinSock 2.0'.
Windows Socket System Status is 'Running'.
Windows Socket supports up to 32767 socket(s).
Windows Socket supports UDP datagram of up to 65467 bytes.
Windows Socket has no additional vendor-specific information.
WSAStart: SSL library load succeeded.
Sockets Client ID 1 enabled.
WSAStart: Exiting (rc = 1)
URL user: '<user>'.
URL pass: '*********'.
URL host: '<site>'.
URL port: '21'.
URL path: '<folder>/test.txt'.
URL type: 'I'.
Using ftp: protocol.
Server host is '<site>'.
Hostname: '<site>'.
Address #1: <site ip>.
Using port '21' for the connection.
Connecting to '<site>'.
Checking user port 21.
Service: 'ftp'.
Port: 21.
Protocol: 'tcp'.
Socket Opened.
Connected.
>220 <site> X2 WS_FTP Server 5.0.5 (1901748322) (S)
<USER <user>

>331 Password required (S)
<PASS
>230 user logged in (S)
Setting DOS/WIN-specific parameters.
<CWD <folder>

>550 <folder>: folder not found (F)
<CWD <folder>

>550 <folder>: folder not found (F)
<REIN

>220 Service ready for new user (S)
<QUIT

>221 Good-Bye (S)
Socket Closed.
Connection closed.
Run Terminated at 10:03:26.531 on 12/08/06.

#IBM-Websphere-Transformation-Extender
#IBMSterlingTransformationExtender
#DataExchange

Originally posted by: SystemAdmin

hi,

you're connecting using plain FTP - possibly the FTP server is not enforcing FTPS on all connections.
Anyway you need to connect using "ftps://" instead of "ftp://", this is what tells TX to use FTPS.

I've never needed to specify -SPROTO or -STR, the client and server should be able to negotiate something.

I would also specify the certificate authority (-CA) if you can - this is used to validate that the site is who they say they are (its a benefit of SSL but not mandatory).

You'll almost certainly need to use passive FTP with FTPS - but you've got -PV so it should work fine.

Cheers,
Olly.
#DataExchange
#IBM-Websphere-Transformation-Extender
#IBMSterlingTransformationExtender

Originally posted by: Staar

Changing 'ftp' to 'ftps' did it! The server I'm connecting to supports secure and nonsecure connections. The root supports both, and certain subfolders require 128 bit encryption (ftps) and others do not require any encryption. Now I just need to figure out where the certificates are stored. Thank you!
#IBMSterlingTransformationExtender
#IBM-Websphere-Transformation-Extender
#DataExchange