[NET-326] A KeyManager is required when the protection level is set to 'P' with FTPSClient on active mode

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0
• Fix Version/s: 3.0
• Component/s: FTP

Environment

Windows XP profesional service pack 2, Java Java 1.6.0_12-b04

• Assignee: Unassigned
• Reporter: Terence Dudouit
• Created: 04/Jun/10 16:03
• Updated: 04/Jun/11 19:26
• Resolved: 21/Mar/11 02:58

Description

Using a simple FTPS client that list a directory, when execPROT("P") is set and the active mode is on, the following exception is thrown :

javax.net.ssl.SSLException: No available certificate or key corresponds to the SSL cipher suites which are enabled.
at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.checkEnabledSuites(SSLServerSocketImpl.java:303)
at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.accept(SSLServerSocketImpl.java:253)
at org.apache.commons.net.ftp.FTPClient.openDataConnection(FTPClient.java:489)
at org.apache.commons.net.ftp.FTPSClient.openDataConnection(FTPSClient.java:494)
at org.apache.commons.net.ftp.FTPClient.listNames(FTPClient.java:1950)
at org.apache.commons.net.ftp.FTPClient.listNames(FTPClient.java:1996)
at fr.enovacom.eai.actions.dynamiques.protocole.ftp.FTPGet.testFTPS(FTPGet.java:379)
at fr.enovacom.eai.actions.dynamiques.protocole.ftp.FTPGet.main(FTPGet.java:401)

This doesn't occur on passive mode.
The only way to make it work is to set a keyManager although there is no need for a client authentication.