[NET-448] Self signed cert or ca not installed on client but FTPS still works

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Not A Problem
• Affects Version/s: 2.0, 3.1
• Component/s: FTP

Environment

client: Windows SP sp4, jdk 1.6.0_24
server: Linux 2.6.32-220.4.2.el6.i686 running vsFTPd 2.2.2
apache lib: commons-net-2.0.jar or commons-net-3.1.jar or commons-net-2.0-jdk14.jar (from zehon)

• Assignee: Unassigned
• Reporter: Deepak Pant
• Created: 02/Mar/12 17:02
• Updated: 17/Apr/13 19:55
• Resolved: 05/Mar/12 16:32

Description

I am using vsftpd ftp server on centos with our own self signed root ca certificate.

I have not installed the self signed root certificate on the client machine. Neither am I setting the Trust Manager on the FTPSClient object, using X509TrustManager instance pointing to my physical cert file.

But I am still able to use the FTPSClient bundled in any of the following jar file and send/receive the files.
commons-net-2.0.jar
commons-net-3.1.jar
commons-net-2.0-jdk14.jar (from zehon)

I was expecting that I will have to either install the self signed root ca on the client machine Or set Trust Manager etc.

Can you please explain the behavior?