Waddo SOCKS oo loogu talagalay FTPSClient-ka Commons Net

Isticmaal isdhexgalka socket proxy ee Commons Net loogu talagalay FTPS adigoo ilaalinaya magaca martigeliyaha serverka, xidhiidhka xogta passive iyo xaqiijinta TLS.

Marka dhexdhexaadiye SOCKS la heli karo, FTPSClient-ka Commons Net wuxuu isticmaali karaa isdhexgalka socket proxy ee la dhaxlay. Serverka FTPS ka dhig meesha xidhiidhku u socdo:

var client = new org.apache.commons.net.ftp.FTPSClient(false);
client.setProxy(new java.net.Proxy(
    java.net.Proxy.Type.SOCKS,
    new java.net.InetSocketAddress("proxy.example", 1080)));
client.setTrustManager(null);
client.setEndpointCheckingEnabled(true);
client.setConnectTimeout(10000);
client.connect("ftps.example", 21);

Tani waxay bilaabaysaa xidhiidh FTPS cad. Barnaamijka ayaa weli mas’uul ka ah gelitaanka, wada-hadalka ilaalinta xogta, maaraynta gudbinta iyo goynta xidhiidhka. Dejinta null trust manager waxay doorataa trust manager-yada caadiga ah ee JVM halkii ay ka dooran lahayd hubinta shahaadada Commons Net ee ku saleysan taariikhda oo keliya. Isticmaal trust store-ka loogu talagalay iyo magaca martigeliyaha shahaadada serverka.

Gudbinta passive, hirgelinta FTPSClient ee hadda waxay sidoo kale abuurtaa socket-ka xogta iyada oo maraysa proxy-ga la habeeyay, kadibna ku darsataa lakabka TLS. Gelitaanka ka dib, isticmaal habka passive oo ka wada-hadal kanaalka xogta la ilaaliyay ee loo baahan yahay iyada oo loo marayo API-ga caadiga ah ee FTPS. Xidhiidh kontorool oo guulaysta ma dhammeeyo shaqaas; xidhiidhka xogta passive wuxuu ahaanayaa waddo gaar ah.

Koodhku wuxuu u malaynayaa adeeg SOCKS oo aan lahayn akoon dheeraad ah. Taageerada aqoonsiga waxay u baahan tahay dib u eegis gaar ah oo loogu talagalay runtime-ka Java iyo hawlgalka la doortay.

Kani maaha isdhexgalka HTTP CONNECT ee FTPHTTPClient. Walaalkaas wuxuu maareeyaa FTP caadi ah iyada oo loo marayo tunnel HTTP; beddelka dekeddiisa ma ku daro FTPS. Haddii shabakaddu ogolaato oo keliya proxy HTTP, dooro hirgelin FTPS ama la qabsasho la dayactiray oo taageerta CONNECT labada waddo ee kontoroolka iyo xogta.

Hayso habeynta proxy-ga inta lagu jiro wareegga nolosha macmiilka, oo dib u eeg ka hor intaadan dib u xidhin nuqul dib loo isticmaalay: goynta FTPS waxay dib u dejisaa warshadaha socket. Ha beddelin hubinta shahaadada trust-all manager si waddadu ugu ekaato mid guulaysatay.

Maqaallo la xiriira