What FTP clients securely handle FTP/TLS where the server has a self-signed cert?
- by billpg
I'm trying to connect to an FTP server that uses TLS on port 990. Unfortunately, the server uses a self-signed cert.
What FTP clients for Windows handle this type of connection securely, such that I can securely verify the cert before continuing with the connection and logging in? (The server admin has supplied me with the expected certificate thumbprint to look for.)
As an example of doing it wrongly, Core FTP LE 2.2 presents a dialog with basic information about the cert presented, inviting me to accept-once, accept-always or cancel. The dialog does not include the cert's hash/thumbprint and without that thumprint, I can't verify if the cert I'm being presented is the right one.