apache / apache/mina-ftpserver

ftpserver 1.2.1 not working in FIPS 140-3 mode

Open
#67 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
67
Forks
38
PR merge metrics
No merged PRs in 30d

Description

Currently running ftpserver 1.2.1 and MINA 2.2.4 on a Red Hat Enterprise Linux 9.4 and 9.5 in FIPS mode using Java 17. When connecting with FileZilla or lftp to the ftpserver, I get a GnuTLS error -217: One of the involved algorithms has insufficient security level. If I toggle FIPS mode off on the systems, I can connect and send data via lftp and FileZilla with no issues.

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the connection failure with ftpserver 1.2.1 and MINA 2.2.4 on Java 17 with FIPS enabled, using lftp or FileZilla on RHEL 9.4/9.5. Trace the security negotiation that produces GnuTLS error -217, then verify that clients can connect and transfer data while FIPS mode remains enabled.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.