SFTP - how to do ?

73 views
Skip to first unread message

mar...@feldtmann.online

unread,
Oct 11, 2023, 3:22:28 AM10/11/23
to VAST Community Forum
Just a small question. I tried to do SFTP with VA 12.0.1, but it always failed. And now I assume, that VA supports FTPS, but NOT SFTP.

Is that right ? Any idea to get SFTP (well I could call external curl again ...)

Marten

mar...@feldtmann.online

unread,
Oct 11, 2023, 10:54:56 AM10/11/23
to VAST Community Forum
Booaahh, that is a nightmare :-)

So, FTPS the way VASmalltalk expects is FTP over TLS. In another FTP client, you select standard FTP protocol AND the option "Require implicit FTP over TLS" (e.g. in FileZilla). It needs as a counterpart a FTP server listening at port 990. The communication is secure from the beginning.

The alternative to it would be "Require explicit FTP over TLS"- here the initial connection is done over the old port 21 and then a protocol update is requested to get a secured connection.

I had to install proFTPd at a RaspberryPI4 to get support for the protocol and I had to read lots of documentation to get it to work. The best way is to use a "passive" client, you have to define a range of ports (max 256 here with a AVM Fritz home router) for the passive data connection and then of course you let the firewall know about that.

The IT-community seems not to be happy with "Require implicit FTP over TLS" standard because it defines two additional ports for its usage - considering the limited number of ports available,  additional ports have to be defined in the firewall. It is considered as an old way of updating a protocol. The standard way today is the protocol update request (like http(s)).

So, nowe I am able to transfer automatically large files to a remote server (2MB text files) - but I still have trouble, that 30% of all transfers are aborted with a message like: "file transfer aborted. lost link to file server". This can be due to OpenSSL, proFTPd or whatever ...

Mariano Martinez Peck

unread,
Oct 11, 2023, 12:50:29 PM10/11/23
to va-sma...@googlegroups.com
Hi Marten,

That's exactly correct. VAST supports FTPS but not SFTP (which is a completely different protocol). 
We have heard of customers using OsProcess with curl, plink, etc. 

Regards,


--
You received this message because you are subscribed to the Google Groups "VAST Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to va-smalltalk...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/va-smalltalk/d1a33b2c-98d5-4067-94ea-e374834f450en%40googlegroups.com.


--

Mariano Martinez Peck

Senior Software Engineer

 mp...@instantiations.com
 @MartinezPeck
 /mariano-martinez-peck
 instantiations.com
TwitterLinkedInVAST Community ForumGitHubYouTubepub.dev

mar...@feldtmann.online

unread,
Oct 11, 2023, 1:02:19 PM10/11/23
to VAST Community Forum
Well, I also switched to a solution by calling external curl.exe command - much simpler and more stable

mar...@feldtmann.online

unread,
Nov 3, 2023, 8:25:24 AM11/3/23
to VAST Community Forum

Hello Mariano,

I would like to see the more usual SFTP protocol support ...

Marten
Mariano Martinez Peck schrieb am Mittwoch, 11. Oktober 2023 um 18:50:29 UTC+2:
Reply all
Reply to author
Forward
0 new messages