Connecting to an FTPS SSL/TLS server

Connecting to an FTPS SSL/TLS server

7

    Oct 06, 2017#1

    Pardon me for opening a new topic, but I could not find anything in the forums regarding using SSL/TLS (TLS v1.2).

    New company policy states that all file transfers must be encrypted. We currently use clear-text FTP with UltraEdit and UltraCompare. I am using a Unisys OS 2200 host. Unisys does not support SSH (and therefore does not support SFTP). In order to connect directly to the server with encryption, the only way to do this is to use SSL/TLS (FTPS). I need some instruction in setting up UltraEdit (and UltraCompare) for FTPS on my PC. We are successfully using FTPS between our Unisys mainframe and windows servers running "EFT Server Enterprise 7.3.0.3".

    We are running 64-bit UltraEdit 23.20.0.43. And 64-bit UltraCompare 16.00.0.44. We are using Windows 7 Enterprise SP1 64-bit Image 1.0.0.

    From what I've learned setting up FTPS on the mainframe I have the following questions regarding using FTPS with UltraEdit.
    • Which version of TLS does it support? TLS v1.2, TLS v1.1,  or TLS v1.0?
    • Does UltraEdit support SHA256?
    • What directories should I put the certificates and key in? I have a private key, and a signed certificate. I have the trusted certificates that were used to sign the signed certificate. Where do these go?
    • Is there any way of caching the private key's pass phrase so that it doesn't have to be entered every time FTPS is used?
    Thank you.
    David Traxler
    Greetings from Chicago!

    6,685587
    Grand MasterGrand Master
    6,685587

      Oct 07, 2017#2

      UltraEdit for Windows v23.20.0.43 and UltraCompare for Windows v16.00.0.44 are installed both with wodFtpDLX v3.5.3.732 which was the latest version of wodFtpDLX on release of these versions of UE and UC.

      This library supports TLS v1.0 to v1.2 and lots of SHA256 algorithms, most likely all algorithms defined up to end of 2015.

      After opening FTP Account Manager and having on tab General selected the suitable FTPS protocol, the items on tab SSH/SLL became active. There it is the option Private key/SSL certificate path with button ... to browse to the key or certificate file. So the certificate file can be stored wherever wanted.

      I have no experience with FTPS, but according to help page for FTP Account Manager it should work to enable check box option Key requires Password and enter on tab General below Password the passphrase and enable Save password.
      Best regards from an UC/UE/UES for Windows user from Austria

      31
      NewbieNewbie
      31

        22:56 - Feb 17#3

        Hello,

        I'd like to re-open this topic and make a feature request. I'm running UltraEdit 2022.0.0.19 on an x86-64 Mac. In this version of UltraEdit for Mac, the SFTP feature only has password-based authentication.

        In today's age... and because of our IT policies at work, we are using certificate-based authentication instead of just username+password.

        I'd like to ask that UltraEdit (for all platforms) support certificate-based remote authentication for remote access.

        Thank you for your consideration.

        Very respectfully,
        Mark

        6,685587
        Grand MasterGrand Master
        6,685587

          12:24 - Feb 18#4

          Hi Mark,

          I want to mention first that FTPS (File Transfer Protocol over Secure Sockets Layer (SSL)) and SFTP (Secure Shell (SSH) File Transfer Protocol) have nothing in common other than files can be transferred between two devices with encryption using these two protocols. The protocols are completely different.

          A private/public key based authentication with certificate files is supported since years by UltraEdit for Windows as it can be seen below:
          ssh_ssl_configuration_window.png (2.69KiB)
          SSH/SSL tab in FTP Account Manager windows of UltraEdit for Windows v2023.2.0.33

          Well, the TLS (Transport Layer Security) and encryption standards changes all the time as also the format of the files storing certificates and keys. A user of a several years old version of UltraEdit cannot expect for that reason that a connection to an up-to-date FTPS/SFTP server will always work if the server dropped the support for older TLS versions for security reasons. An older version of UltraEdit might also not support the latest certificate file formats.

          Please note that this is a user-to-user forum. Feature requests must be sent by email to UltraEdit support which can help also on how to configure an SFTP account using certificates for authentication if that is supported by UltraEdit for Mac somehow. See the technical support page for more details on how to contact UltraEdit’s technical support.
          Best regards from an UC/UE/UES for Windows user from Austria

          31
          NewbieNewbie
          31

            0:47 - Feb 19#5

            First: Thank you for your dedication ... you've been doing this since 2017 (at least) ... and thank you for your reply. I sent a note to UltraEdit via their tech support page.

            --M

              0:05 - Feb 21#6

              I want to followup on this issue. @Mofi did a great job pointing me in the right direction. I posted a question directly to their tech support and they came back with a great response.
              UltraEdit support wrote:Thank you for your message. You should be able to configure UltraEdit Mac to use private key authentication for SFTP. When you define your SFTP account in the Account Manager, please click on the Protocol tab. With the Protocol tab visible, click on the Connection drop-down and select SSH from the list. You can define your settings for the public and private keys here.
              ...and I confirmed that this works on my Mac version of UltraEdit.