Tuesday, March 16, 2010

FTPS Client based authentication

The HTTPS server in CrushFTP has been able to authenticate users by a client based certificate allowing for auto user/password authentication based solely on the certificate installed in the browser.

Technically, the FTP protocol can do this as well, and so I have added support for it with the FTP protocol too. I verified this using the command line client "curl". Its still a bit of a pain dealing with all the certificates, so I'll be writing up some entries in my Wiki to help people with the process.

The summary? CrushFTP now supports FTPS client based certificates for authentication where the common name is the username. The cert the user provides must exist in your trust store file as a certificate that was issued from your server, or it won't be accepted.

3 comments:

Anonymous said...

Hello Ben,

We are using CrushFtp at my workplace..I am working as programmer here...i need to customize the menus which are given in html preview..Default are name, size and modified time.. i want to add more fields..please tel me how to do dis..??

Anonymous said...

Hello Ben,

We are using CrushFtp at my workplace..I am working as programmer here...i need to customize the menus which are given in html preview..Default are name, size and modified time.. i want to add more fields..please tel me how to do dis..??

Ben Spink said...

Neha,

Please email me directly as I don't monitor the comment threads on posts directly. I guess I'll have to enable notifications in blogspot to find out about these comments.

Thanks,
Ben