Support ftp with tls/ssl encrpytion

[Fabian]

Hi,

it would be great if dejadup could support ftp over tls/ssl encrypted connection.
I need this feature since my (cheap) NAS does not support sftp (over ssh) but only ftps (over tls/ssl).

Thanks a lot and thanks for your hard work!

Sincerely
Fabian

[Michael Terry (mterry)]

This isn't yet supported in duplicity, so would have to be added there first.

[Marcel Pennewiß (mape2k)]

duplicity supports ftps since 0.6.12
(https://bugs.launchpad.net/duplicity/+bug/626915)

[Kenneth Loafman (kenneth-loafman)]

This is a documentation bug/absence. If you specify ftps://, duplicity will
use lftp, and that supports tls/ssl.

On Mon, Aug 29, 2011 at 12:00 PM, Marcel Pennewiß <<email address hidden>
> wrote:

> duplicity supports ftps since 0.6.12
> (https://bugs.launchpad.net/duplicity/+bug/626915)
>
> --
> You received this bug notification because you are subscribed to
> Duplicity.
> https://bugs.launchpad.net/bugs/784331
>
> Title:
> Support ftp with tls/ssl encrpytion
>
> Status in Déjà Dup Backup Tool:
> Confirmed
> Status in Duplicity - Bandwidth Efficient Encrypted Backup:
> New
>
> Bug description:
> Hi,
>
> it would be great if dejadup could support ftp over tls/ssl encrypted
> connection.
> I need this feature since my (cheap) NAS does not support sftp (over ssh)
> but only ftps (over tls/ssl).
>
> Thanks a lot and thanks for your hard work!
>
> Sincerely
> Fabian
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/deja-dup/+bug/784331/+subscriptions
>

[Michael Terry (mterry)]

Marking fix released for duplicity then, but Deja Dup doesn't use the normal ftp/ftps backends in duplicity, instead it uses the GIO backend. Not sure what its support level is for this.

[Michael Terry (mterry)]

This should work if you enter ftps://... in the Custom Location field. Please re-open if it doesn't.

[Naël (nathanael-naeri)]

Hi Michael,

I can confirm that it doesn't work, but I don't have the rights to switch the bug status back to Confirmed.

I'm trying to backup to a FTP server that supports explicit SSL/TLS on the usual port 21 (i.e. the client and server explicitly negotiate security and agree on a mutually-supported encryption method). That server doesn't support implicit SSL/TLS on port 990 (i.e. the client contacts the server in TLS from the start, by immediately challenging it with a TLS handshake).

Implicit FTPS is considered deprecated or at least unofficial, contrary to explicit FTPS, mostly because explicit FTPS made it to a final RFC whereas implicit FTPS stayed in a draft version. In case that's important for Déjà-Dup/duplicity: lftp supports implicit FTPS through the ftps:// URI scheme and explicit FTPS through the usual ftp:// scheme.

I tried the following addresses for org.gnome.DejaDup.File path:

  ftps://user@server/path/to/some/dir
  ftps://user@server:21/path/to/some/dir

In both cases, backup fails with the error "Location is not mountable".

Using deja-dup 30.0 and duplicity 0.6.23 on Ubuntu 14.04 LTS: too old?

[Naël (nathanael-naeri)]

$ lsb_release -d
Description: Ubuntu 14.04.5 LTS

$ dpkg-query -W deja-dup duplicity
deja-dup 30.0-0ubuntu4.1
duplicity 0.6.23-1ubuntu4.1

$ gsettings list-recursively org.gnome.DejaDup > /tmp/deja-dup.gsettings
# attached, nothing fancy

$ DEJA_DUP_DEBUG=1 deja-dup --backup | tail -n 1000 > /tmp/deja-dup.log
# empty log file

[Michael Terry (mterry)]

Does that URL work in Files (nautilus)? We use the same plumbing it does.