TLSv1.3 connection is failing

[aduzsardi]

Howdy,
There has been a ticket/issue opened (and now closed/reject https://trac.filezilla-project.org/ticket/12099#comment:27) on the filezilla trac system regarding compatibility with TLSv1.3
The filezilla project maintainer suggested the that issue with TLSv1.3 compatibility comes from mina-ftpserver.

Is there any way this can be fixed and a new version released ?
Thank you!

[elecharny]

Hi, we need to cut a ftpserver release with a dependeny on the latest MINA version, which support TLS 1.3.

…

On 24/06/2023 08:39, Alexandru Duzsardi wrote: Howdy, There has been a ticket/issue opened (and now closed/reject https://trac.filezilla-project.org/ticket/12099#comment:27 <https://trac.filezilla-project.org/ticket/12099#comment:27>) on the filezilla trac system regarding compatibility with TLSv1.3 The filezilla project maintainer suggested the that issue with TLSv1.3 compatibility comes from mina-ftpserver. Is there any way this can be fixed and a new version released ? Thank you! — Reply to this email directly, view it on GitHub <#26>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAWJQFIJWVSKBB3TDG47ZHDXM2DQLANCNFSM6AAAAAAZSKUWVU>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- *Emmanuel Lécharny - CTO* 205 Promenade des Anglais – 06200 NICE T. +33 (0)4 89 97 36 50 P. +33 (0)6 08 33 32 61 ***@***.*** https://www.busit.com/

[aduzsardi]

Thanks @elecharny
I tried just swapping out the dependency in pom.xml , obviously din't work 😄
That's about it my knowledge about java development , and mvn clean install

I'll wait for a new release with TLS1.3 support , hopefully it will not be to long of a wait

[elecharny]

Yes, there are small differences between 2.1.6 and 2.2.2:

https://mina.apache.org/mina-project/2.2-vs-2.1.html

It should not be such a work to migrate.

[aduzsardi]

Hi @elecharny , i see that TLS1.3 has been added by updating the mina-core dependecy.
Thank you.
Another related question, do you think another issue related to TLS1.3 could be resolved ?
This time related to Gnu-TLSv1.3 vs java's TLSv1.3...specifically when using Filezilla
They say it's java's problem , and not reasonable at all even though the only ftp client we are using that's acting out is Filezilla
Related issues raised
https://trac.filezilla-project.org/ticket/12099
https://gitlab.com/gnutls/gnutls/-/work_items/1451

[elecharny]

Hi,

it seems we need to add some specific handling of closure on MINA's side, accordingly to the latest comment on the filezilla ticket.

[aduzsardi]

from my understanding it's core java vs gnutls issue , can this be resolved only in MINA ?
thank you