68773: ftp - issue PBSZ command before PROT

diffblue · May 5, 2024 · 06efb4b · 06efb4b
1 parent bdf6df5
commit 06efb4b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/main/org/apache/tools/ant/taskdefs/optional/net/FTP.java b/src/main/org/apache/tools/ant/taskdefs/optional/net/FTP.java
@@ -2590,6 +2590,10 @@ public void execute() throws BuildException {
             if (useFtps && useSecureDataChannel) {
                 FTPSClient ftps = (FTPSClient) ftp;
                 try {
+                    // first issue a PBSZ command as mandated by RFC-2228.
+                    // we set 0 because the buffer size is redundant since the encryption
+                    // is handled at TLS layer and not application layer
+                    ftps.execPBSZ(0);
                     ftps.execPROT("P"); // P implies PRIVATE and enables encryption
                 } catch (IOException e) {
                     throw new BuildException("failed to enable secure data channel: " + e, e);