Trying to upgrade to 5.4.3.2 (from 5.3.10.97) and ...
# luceec
czeller
09/07/2023, 3:38 PMTrying to upgrade to 5.4.3.2 (from 5.3.10.97) and we've hit an issue with cfftp. It's not the deprecated algorithm issue others have mentioned (not yet anyway).
Opening a connection results in a hung request. (Stack trace is in the thread) The only recourse is to restart Lucee.
Anyone else run into this?
Copy code
<cfftp
action="open"
connection="testconnection"
server="172.31.25.27"
username="foo"
password="bar"
secure="true"
passive="false"
port="22"
timeout="5"
stopOnError="Yes">czeller
09/07/2023, 3:38 PMUntitled
czeller
09/07/2023, 3:41 PMSame problem connecting to two different hosts
czeller
09/07/2023, 3:44 PMInteresting...I do see the connection accepted by the FTP server
czeller
09/07/2023, 3:53 PMLogs from the FTP server indicate a successful connection. This same sequence is what I see for successful connections from other FTP clients
z
zackster
09/07/2023, 4:38 PMwhat's the ssh server version on the other end?
zackster
09/07/2023, 4:42 PMtry setting the env var lucee_debug_jsch=true and restarting which will spit out the jsch debug logging to the catalina.log
c
czeller
09/07/2023, 4:44 PMwhat's the ssh server version on the other end?This is what WinSCP shows when I connect through it:
Copy code
File transfer protocol = SFTP-6
Cryptographic protocol = SSH-2
SSH implementation = 8.49 FlowSsh: Bitvise SSH Server (WinSSHD) 8.49
Encryption algorithm = AES-256 SDCTR (AES-NI accelerated)
Compression = Notry setting the env var lucee_debug_jsch=true and restartingthanks, i'll try the debug logging
czeller
09/07/2023, 4:53 PMI added the env var
lucee_debug_jsch,trueczeller
09/08/2023, 4:54 PMUpdate: the locking problem seems tied to this particular FTP server, Bitvise. I've tried against two different servers running Bitvise with the same result. We are able to make connections to various other FTP servers.
Any ideas on a workaround?
czeller
09/08/2023, 5:13 PMAh, I just found the solution. I found some custom code we were using in place of cfftp to work around this problem even on Lucee 5.3.10.97 - apparently it's not new...
For whatever reason, this approach works fine (no locking issues)
Copy code
var jsch = CreateObject("java", "com.jcraft.jsch.JSch").init();
var jschConfig = CreateObject("java", "java.util.Properties").init();
jschConfig.put("StrictHostKeyChecking", "no");
jschConfig.put("PreferredAuthentications", "password");
variables.jschSession = jsch.getSession("{user}", "{host}", "{port}");
variables.jschSession.setConfig(jschConfig);
variables.jschSession.setPassword("{password}");
variables.jschSession.setTimeout(10 * 1000);
variables.jschSession.connect();
variables.jschChannel = variables.jschSession.openChannel("sftp");
variables.jschChannel.connect();z
zackster
09/11/2023, 9:03 AMso there's no issue reported about this in jira yet?
c
czeller
09/11/2023, 4:03 PMI don't see anything. Maybe because it's only a problem trying to do secure connections with a specific FTP server? (Bitvise)