Change #282157

Category	None
Changed by	Joshua Rogers <MegaManSecohnoyoudont@users.noreply.github.com>
Changed at	Fri 18 Sep 2026 22:56:40
Repository	https://api.github.com/repos/curl/curl
Project	curl/curl
Branch	master
Revision	7f364029b861d064caa128f4a8cb7b34696f7db3

Comments

ftp: require TLS on the data connection for implicit FTPS

A bare ftps:// URL leaves CURLOPT_USE_SSL at CURLUSESSL_NONE, so a
server rejecting PROT P got a cleartext data connection and CURLE_OK.
Treat an implicit TLS scheme as CURLUSESSL_ALL when deciding the data
connection protection level, without changing ftp_conn.use_ssl, which
takes part in connection reuse matching.

Test 1790.

Closes #22995

Changed files

lib/ftp.c
tests/data/Makefile.am
tests/data/test1790