Asus FTP Server - access to the server if TLS enabled

[Andro]

Router: RT-AX86
Firmware version (stock): 3.0.0.4.388.23285

The problem is that when the option "Enable TLS support" is enabled on the server, unfortunately I cannot connect to the server using my smartphone. For testing purposes, I tried to connect to the server using clients on Windows: FileZilla and WinSCP and here the connection is done correctly. For Android, I use this File manager but I also tried others, unfortunately but it is not possible to connect to the server when "Enable TLS support" is enabled. I'm wondering what could be the cause of this. It seems to me that on the previous version of the firmware, such a connection with the option "Enable TLS support" worked. Generally, I can access the FTP server from the LAN and from the outside only via VPN so TLS may not be so important in this case but I would like to know what could be the reason that it does not work on Android.

 

[Adooni]

for android I am using "CX File Explorer" and no issue there.

 

[Andro]

for android I am using "CX File Explorer" and no issue there.

I tested CX File Explorer but unfortunately it doesn't work at my side either.

 

[ColinTaylor]

I had the same problem with AndFTP. Try these changes in a vsftpd.postconf script.

#!/bin/sh

CONFIG=$1
source /usr/sbin/helper.sh

# Enable TLS/SSL
sed -i "s/ftpd_banner.*/ftpd_banner=Welcome to the FTP service./g" $CONFIG
pc_append "ssl_ciphers=HIGH" $CONFIG                   # Required for Core FTP LE
pc_append "require_ssl_reuse=NO" $CONFIG               # Required for AndFTP

 

[Andro]

I had the same problem with AndFTP. Try these changes in a vsftpd.postconf script.

#!/bin/sh

CONFIG=$1
source /usr/sbin/helper.sh

# Enable TLS/SSL
sed -i "s/ftpd_banner.*/ftpd_banner=Welcome to the FTP service./g" "$CONFIG"
pc_append  "ssl_ciphers=HIGH" "$CONFIG"                 # Required for Core FTP LE
pc_append  "require_ssl_reuse=NO" $CONFIG               # Required for AndFTP

Forgive me for a perhaps silly question I have access to the router via PuTTy, how to execute this code, where to type it, whether to paste it all in and ENTER. How to access the vsftpd.postconf file

 

[ColinTaylor]

Custom config files

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

 

[bbunge]

The OP is using stock firmware!

 

[ColinTaylor]

The OP is using stock firmware!

Ah, good spot. I didn't notice that.

@Andro Ignore what I said about custom Merlin scripts. You'll have to hope that Asus fixes the problem in a future firmware update.

 

[Andro]

You'll have to hope that Asus fixes the problem in a future firmware update.

I wrote to support from within the router via the feedback channel. Maybe someone there will read it

 

[Andro]

Unfortunately, the problem still exists in the latest firmware (300438824231). I'll ask just out of curiosity, does this problem also exist on the latest Asuswrt-Merlin software or has this problem been fixed there? Is it that if the problem exists on the stock firmware it also must exists on the Asuswrt-Merlin firmware?

 

[ColinTaylor]

ssl_ciphers=HIGH was added by RMerlin in 3004.388.4-beta1 so that might fix it for you.

rc: enforce the use of stronger ciphers in vsftpd · RMerl/asuswrt-merlin.ng@dc2f839

Third party firmware for Asus routers (newer codebase) - rc: enforce the use of stronger ciphers in vsftpd · RMerl/asuswrt-merlin.ng@dc2f839

github.com

But I suspect it is require_ssl_reuse=NO that you need.

 

[Andro]

ssl_ciphers=HIGH was added by RMerlin in 3004.388.4-beta1 so that might fix it for you.

If so, there is a reason for me to finally try this software