apache / apache/mina-ftpserver
ftpserver 1.2.1 not working in FIPS 140-3 mode
- Dominant language
- Java
- Stars
- 67
- Forks
- 38
- PR merge metrics
- No merged PRs in 30d
Description
Currently running ftpserver 1.2.1 and MINA 2.2.4 on a Red Hat Enterprise Linux 9.4 and 9.5 in FIPS mode using Java 17. When connecting with FileZilla or lftp to the ftpserver, I get a GnuTLS error -217: One of the involved algorithms has insufficient security level. If I toggle FIPS mode off on the systems, I can connect and send data via lftp and FileZilla with no issues.
Contributor guide
No contributing guide indexed for this repository
Research direction
Reproduce the connection failure with ftpserver 1.2.1 and MINA 2.2.4 on Java 17 with FIPS enabled, using lftp or FileZilla on RHEL 9.4/9.5. Trace the security negotiation that produces GnuTLS error -217, then verify that clients can connect and transfer data while FIPS mode remains enabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100