lftp support ftps (different from sftp). ftps is ftp over an explicit TLS (SSL) connection. We’ve seen a few sites running MS IIS that require ftps and getting lftp to work has been tricky. To make it work verify that your lftp build has gnutls support compiled in with:
|
1 |
lftp -v |
This build does not:
|
1 |
Libraries used: Readline 5.1, Expat 1.95.8, OpenSSL 0.9.8d 28 Sep 2006 |
Here’s one that does:
|
1 |
Libraries used: Readline 5.1, Expat 1.95.8, GnuTLS 2.6.6, zlib 1.2.3 |
Once you have have TLS support in your lftp build then you can put a file with something like this:
|
1 2 3 4 5 6 |
lftp -c 'open -e "set ftps:initial-prot ""; \ set ftp:ssl-force true; \ set ftp:ssl-protect-data true; \ put test.txt; " \ -u "USERNAME","PASSWORD" \ ftps://HOSTNAME:990 ' |
The option sets are critical as lftp wants to do “PROT C” by default but Windows wants to see “PROT P”.
8 Responses
This was very useful, thanks.
I had been trying to find out if lftp supplied in RHEL5.3 supported TLS. The lftp -v command indicated it wasn’t, so I’ve compiled the latest lftp software from scratch and now I can see ftps is available.
This has saved quite a lot of headaches.
Thanks,
Colin
thanks a million for this post, you undoubtedly saved me from many hours of tinkering
Thank you!
lftp -v on my RHEL 5.7 says TLS is not linked, not even OpenSSL, but this all worked..
I am interested in the FTPS using lftp package in Cygwin. Please let me know which cygwin version we should use and how to go about this. I have Cygwin but it does not have the mentioned GNUTLS support. It would be helpful if someone can le tme know the cygwin version that would have lftp with gnutls support…
Thanks in advance
you are a god! I have been trying for hours to get this working on CentOS 6.4
A few notes:
– ldd /usr/bin/lftp does NOT include ssl but your method still works (version 4.0.9)
– I got “Certificate verification: unable to get local issuer…” error so I added “set ssl:verify-certificate no” to the command string to get it working
Thank you for this very useful post !
I’ve been stuck on similar issue for hours…
Cheers,
ATo
Thanks so much! Saved me a lot of frustration with a vendor who insisted they hadn’t changed anything on their end…