Re: FTP Extensions for Cryptographic Hashes (draft-bryan-ftp-hash)

[Anthony Bryan <[e-mail]>]

On Tue, Apr 6, 2010 at 9:00 AM, William F. Maton Sotomayor
<[e-mail]> wrote:
>
> Hi Anthony
>
>        Nice draft.  FYI, I'm semi-maintaining the venerable wu-ftpd
> codebase, largely for my own purposes as well as to collate the various
> patches I have come across the 'net.  FYI, wu-ftpd supprts the following to
> do something similar (I think it's had that for ages now?) :
>
>    | SITE check_login SP CHECKMETHOD SP method CRLF
>    | SITE check_login SP CHECKMETHOD CRLF
>    | SITE check_login SP CHECKSUM SP pathname CRLF
>    | SITE check_login SP CHECKSUM CRLF
>
> Right now the code 'cheats' its way to doing it like this:
>
> 1) Which ones we support:
>
>        reply(200, "Current checksum method: MD5 (RFC1321)");
>        reply(200, "Current checksum method: CRC (POSIX)");
>
> 2) Making calls to installed programs in the paths.
>
> And of course in English:
>
> o  Added 'SITE CHECKMETHOD' and 'SITE CHECKSUM'.
>
>        SITE CHECKMETHOD [CRC|POSIX|MD5|RFC1321]
>
>        Sets or displays the current check method.  If no parameter is
>        given, displays the current method; otherwise the method is set to
>        the given algorithm.  CRC and POSIX are equivalent and are the
>        output of the GNU cksum(1) utility.  MD5 and RFC1321 are equivalent
>        and are the output of the GNU md5sum(1) utility.  The default check
>        method is RFC1321 (MD5).
>
>        SITE CHECKSUM [<file>]
>
>        Calculates the checksum for the named file.  If no file is given,
>        the last file transferred (uploaded or download) is used.  If no
>        file has yet been transferred, reports an error.  The current
>        CHECKMETHOD is used to calculate the checksum.
>
> Looking at the code it seems to have been introduced sometime in 1998.
>
> FYI, more on this at my site:
>
>        http://www.wfms.org/wu-ftpd/
>
> I'll have a second look at your draft and see if I can offer up any more
> comments.  Thanks!

Hi William, great to hear from someone familiar with current
implementations! (I added wuftpd to the appendix listing apps
supporting alternate hash commands).

We've put out an -01 revision, and you can see diffs here.

tools.ietf.org/html/draft-bryan-ftp-hash

If you have any more comments, please let us know.
-- 
(( Anthony Bryan ... Metalink [ http://www.metalinker.org ]
  )) Easier, More Reliable, Self Healing Downloads