SSL/TLS support over FTP?

General discussion on Zend Studio
slinzer
Posts: 1
Joined: Thu Jan 27, 2011 9:42 am

SSL/TLS support over FTP?

Post by slinzer » Thu Jan 27, 2011 9:45 am

I've searched the forum, I've wrecked havoc on Google and the hole of the Internetz in search for an answer to this question.

Is there anyway to use SSL or TLS when connecting to a remote server?

guen178
Posts: 1
Joined: Mon Nov 18, 2013 9:59 pm

Re: SSL/TLS support over FTP?

Post by guen178 » Mon Nov 18, 2013 10:02 pm

That's a realy good question (from 2011 and no answer). I searched now for ours anf found nothing. Can somebode answer and help me please

lionelviot
Posts: 11
Joined: Tue Jul 27, 2010 11:21 am

Re: SSL/TLS support over FTP?

Post by lionelviot » Mon Dec 01, 2014 3:45 pm

Is it still not possible to use this feature?
It seems that since v6, Zend Studio supports SSH only and FTP only (no FTP over SSL).
Windows doesn't diserve security??? It is really unsecure to only use FTP...

Code: Select all

220 Microsoft FTP Service

USER ***********************
534 Policy requires SSL.

QUIT
221 Goodbye.

User avatar
kaloyan_r
Zend Product Manager
Posts: 582
Joined: Thu May 23, 2013 12:40 pm

Re: SSL/TLS support over FTP?

Post by kaloyan_r » Tue Dec 02, 2014 10:39 am

Could you clarify the exact workflow you need this type of connection?
Kaloyan Raev
Zend Studio Team

lionelviot
Posts: 11
Joined: Tue Jul 27, 2010 11:21 am

Re: SSL/TLS support over FTP?

Post by lionelviot » Tue Dec 02, 2014 2:22 pm

In order to work on some of our small projects that doesn't need versioning, we were using "php project from remote server" and SSH connection.
However, since our migration on Windows Server 2012 r2, we can't use SSH anymore.
Our servers are in DMZ, and for security reasons, we won't use FTP only.
Data must be encrypted using SSL.
The ftp server is already set with a certificate and is operational (works for other services than dev purpose).

User avatar
kaloyan_r
Zend Product Manager
Posts: 582
Joined: Thu May 23, 2013 12:40 pm

Re: SSL/TLS support over FTP?

Post by kaloyan_r » Tue Dec 02, 2014 4:50 pm

Thanks for clarifying!

I did some testing on my side by installing the mini-sftp-server from http://www.coreftp.com/server/ on Win7 VM. I was able to create a remote project using a connection of type "SSH Only". It turns out this connection type covers both SSH and SFTP.

Could you try the "SSH Only" type with your SFTP server?
Kaloyan Raev
Zend Studio Team

lionelviot
Posts: 11
Joined: Tue Jul 27, 2010 11:21 am

Re: SSL/TLS support over FTP?

Post by lionelviot » Tue Dec 02, 2014 10:17 pm

It is not possible for me to use SSH anymore cause our servers are on Windows Server 2012 R2.
Our current FTP server is FTPs (FTP over SSL) not sFTP (SSH tunneling FTP).
Our older configuration was sFTP (cf previous post).

User avatar
kaloyan_r
Zend Product Manager
Posts: 582
Joined: Thu May 23, 2013 12:40 pm

Re: SSL/TLS support over FTP?

Post by kaloyan_r » Wed Dec 03, 2014 3:13 pm

Lesson learnt: SFTP != "FTP over SSL"

Indeed, looks like Studio does not support this protocol right now. We will be looking at what we can do in future releases.

One more question to understand better the business case.
Is it technically impossible to install SSH on Windows Server 2012 R2, or is it some company/provider policy that prohibits this?
Kaloyan Raev
Zend Studio Team

lionelviot
Posts: 11
Joined: Tue Jul 27, 2010 11:21 am

Re: SSL/TLS support over FTP?

Post by lionelviot » Wed Dec 03, 2014 4:23 pm

It is technically possible, but Microsoft doesn't officially support SSH.
Existing SSH servers aren't recommended for production environment by publishers themself...

The question is: why Zend remove this function since version 6+? Some pages are still available on the web with v5.5

User avatar
kaloyan_r
Zend Product Manager
Posts: 582
Joined: Thu May 23, 2013 12:40 pm

Re: SSL/TLS support over FTP?

Post by kaloyan_r » Thu Dec 04, 2014 9:27 am

5.5 was the last version built on a home-brew platform of Zend. Version 6 was a complete rewrite of Zend Studio on top of the Eclipse Platform. For remote file system connectivity there is a designated component in the Eclipse Platform called RSE. Unfortunately, does not currently support FTP over SSL.

The only immediate option available to you right now is to install SSH on the Window Servers and use it as before.

I don't understand the meaning of this:
lionelviot wrote:Existing SSH servers aren't recommended for production environment by publishers themself...
You need SSH for development only. You don't need to expose it to Internet. You mentioned that your servers are in a DMZ. So you can open the SSH server only to the company's intranet, where the developers are. Any issue with this?
Kaloyan Raev
Zend Studio Team

Post Reply