SFTP options?

[rfresh]

I know B4A doesn't support SFTP but do we have any other options to send and receive files securely? Like SSH or https? Would these protocols work that way?

 

[vb1992]

You can encrypt a file before using FTP

http://www.b4x.com/forum/additional...ile-v1-30-writeencryptedobject.html#post64625

 

[vb1992]

https would work

 

[rfresh]

I'll have to go with https. My website only supports SFTP for pci compliance. I'll look into using https.

 

[Erel]

You can also use FTP over SSL.

 

[rfresh]

You can also use FTP over SSL.

I have a website with SSL, so you're saying I can use the b4a FTP on that site as is? I thought SSL was only used with HTTPS?

 

[Erel]

See this link: FTPS - Wikipedia, the free encyclopedia

You should call FTP.UseSSL = True.

 

[rfresh]

I added that but the download connection fails (success=false). How can I get the error msg so I know why it failed?

 

[Erel]

Log(LastException)

 

[rfresh]

Thanks Erel, obviously I should have thought of that.

My error msgs are:

error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol (external/openssl/ssl/s23_clnt.c:683 0xad127577:0x00000000)

and

(SSLProtocolException) javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0x42b450: Failure in SSL library, usually a protocol error

My website provider tells me this:

"In summary please adjust [ VisualBasic ] to accept non verified certificates so that it can connection with encryption on."

This is a VPS website and the website does not have an SSL Cert so the hosting provider is telling me to let the B4A (VB to them) accept non verified certificates. Is this possible or do I have to actually install an SSL Cert to get this to work?

Update: my hosting provider gave me this reference to VB.NET and the AuthSLL property. Does B4A support AuthSSL = False or something like it? AuthSSL = False tells the app not to authenticate the SSL cert (which will prevent the connection failure) but the connection data flow will still be encrypted.

http://www.limilabs.com/blog/use-ssl-with-ftp-explicit

 

[Erel]

Such a solution is currently only available for Http requests.

If this app is for a specific set of devices then you can try to use a self certificate and add it to the devices certificates list.

 

[rfresh]

No, my app isn't for a specific set of devices...thanks Erel.

Is the FTP feature "accept non verified certificates" something that is on your to do list?

 

[Erel]

Please start a new thread for this request in the wishlist forum.