sftpc.todo.txt

伯克利做的SFTP安全文件传输协议

Todo list for sftpc
-------------------

* fix -9 so -c doesn't need to be passed

- add mutlple-file commands to test code.. ideally all commands
  would be tested.. have to think about which, if any, would be
  better tested by deja-gnu approach (i.e., are they function or
  ui, or both?)

- use a .sftpc file, to specify things like passive mode and no
  data-channel encryption

- command-line option, and .sftpc equivalent, for "idle 7200"
  after successful login; how about automatic keep-alive?

- mput file1 file2 file3..

- mput/mget -R ?

- encrypting proxy server (?)   (this is highest priority?)

* investigate 125 server response to a GET (how compares to
  150, which sftpc currently expects)

- look again at Linux transparent proxying..

- key database might be keyed by both server IP and port
  (to allow a single firewall to present several sftpds
  with different keys)

- poll the connection every 5 minutes to see if the server
  has already booted me due to timeout

- record ADATs in case negotiation fails; if it does, dump them
  to a file for analysis

high priority:

- problems when mget includes a directory name!!

- problems with names that include spaces


------ fixed but not tested ----------

- make passive mode the default

- lcd in "help" list


------ decided not to implement -------------

- "abort" doesn't seem to do anything, but I'm not sure we should even
support that... (because many servers seem not to)

- internally translate "!cd" to "lcd"


------ couldn't reproduce ----------------

- segfault:
    sftpc> ls
    sending plaintext request: TYPE A
    sending request: ENC DwO4JamS3vPL1QyU/XT5xK0qVAugaZiwWTZAmq1QWyqwhiFgZkh2HQY=
    waiting for server reply
    632 JUaw9eIMGpBbG8oJMnVZdf/BPJ7oHXQ34D5L8CLTBi1FNTMnURk/n3okbSETUu3wAA==
    200 Type set to A.
    sending plaintext request: PASV
      ... stuff that konsole won't copy correctly (?) ...
    sending plaintext request: LIST
    sending request: ENC VSQZIVfsqdymjksNM//zdRZeG3Y0Ce+yXq+Kl3FSyu8A
    waiting for the 150
    waiting for server reply
    632 9V56B2cqQD3O7Wsd0sj3bBZUO6t37vxdAUYG+qDH743v8yQpO6Tl5stqWuoTS0Bkv/7eEBePFShxcrbTY8iDIbLDrpkDXYoRQuzR+mvbXEUF
    510 recv: Connection reset by peer (code 232)
    oops.. that was supposed to be a 150
    Exception thrown: 510 recv: Connection reset by peer (code 232)
    Segmentation fault

- bug:
    sftpc> !ls
    #index.html#       s25_01.jpg         s25_06.jpg         s25thmb.jpg
    cs265.html         s25_02.jpg         s25_07.jpg         se25bg.zip
    cs265.html~        s25_03.jpg         s25_08.jpg         shapeanal2.ps
    index.html         s25_04.jpg         s25_09.jpg         shapeanalysis1.ps
    index.html~        s25_05.jpg         s25_10.jpg         spaceships.jpg

    sftpc> mput shape*
    Exception: stat: File not found, .#index.html

- I saw this error on an mput:
sftpc> mput sftp*
stat: No such file or directory
stat: No such file or directory
(the mput worked, I just didn't know what the errors were about)

- mget/mput should remove directories from the list of matching names
before working on them.



------- now implemented -----------

- typing control-d at the sftpc prompt makes it go crazy.
  aliasing that to quit would be nice.

- option to ignore server's IP

- fails on crazier.nonexist.file when cwd of src and dest are same
  during "test"

- fix ./ problem with make check

- replace gets with fgets in makekeys

- use /dev/random!

- why does backspace not work?

  (was problem with terminal emulator bug)

- better behavior when network disconnected

  (not sure.. I guess it's a little better now..)

- don't read random seed if only going to emulate 959

I'm thinking it may be nice to eventually implement auto-dropdown (with a
disable dropdown option), so that people can eventually use sftpc as a
complete replacement for their ftp client.
(be sure to check key db)

- implementing "status", if it's easy

mismatch warning scrolls off screen

Also, we can't really claim
sftpc is any more secure than plain old 959 ftp until we implement key
saving and eliminate the "trust-every-time" policy.

- Why doesn't the (-9) switch seem to work?
It still issues the AUTH, and for secure servers it gets a DIGT-mismatch.

- Could we add a switch to tell sftpc where to look for it's randomSeed and
client keys? The local directory is not a very good default. Perhaps
defaulting to "~/.sftpc" would be good, and makekeys could be changed to
use this directory of client keys and setup appropriate permissions
(og-r)... A related problem is that when sftpc exits, it writes (or
creates) a randomSeed file in whatever happens to be the current local
directory. (security hazard, etc.)

- I've seen the "test" command fail twice in 2 different ways. Once happens
when the local and remote directory are the exact same directory (and on
the same file system). The second one happens when you start sftpc with no
data encryption (-c) when it reaches the first passive mode transfer:
Exception: Assertion failed: !"tried to read past end of stream", file
reply.cpp line 190

- Could we add the "!" command, which does a shell command (all your code
has to do is pass everything after the "!" to system()) (I often do things
like "!ls", or just "!" to get a prompt)

- cd and lcd should also work with no argument to get to the default dir
(CWD without an arg moves to the login directory on most ftpd's). This is
especially annoying because lcd doesn't correctly expand tildes
(e.g. "lcd ~/bin" fails)

- A few of the supported commands aren't on your help screen (ls, rename),
and there's a some useful aliases in ftp for other commands you've already
implemented (delete=rm, reset=sync, site="quote SITE", idle="quote SITE
IDLE", umask="quote SITE UMASK" chmod="quote SITE CHMOD" rhelp="quote
HELP", system="quote SYST", size="quote SIZE", rstatus="quote STAT").

- ls should do a LIST, not a NLST.

- Could we alias "disconnect" and "close" to "quit"? (I assume resetting
sftpc's state would be too much of a pain and probably not worth it?)

- Your message: "Data channel is currently unencrypted (change with 'prot')." 
  but "prot" does nothing (I don't think we need to support dynamically
changing prot mode, just change the message)

- The console message for sent commands in "debug" mode is missing a
linefeed, as is the error message for unrecognized help topic

- The "mdelete" command, if it's easy to do from what you already have

- implementing "hash", if it's easy