SQL Server

FTP over Implicit TLS (Ssl, AuthSsl, AutoFix)

Demonstrates the SSL/TLS connection-mode properties Ssl, AuthSsl, and AutoFix. Setting Ssl true selects implicit FTPS, in which TLS begins immediately after the TCP connection on port 990.

Background: FTP has two ways to add TLS: implicit (this example) starts encrypted from the first byte on a dedicated port, 990; explicit (via AuthTls) connects in the clear on port 21 and issues AUTH TLS to upgrade. Explicit is the modern standard; implicit persists mainly for legacy servers. AuthSsl is an obsolete AUTH SSL variant to avoid. AutoFix, on by default, infers the mode from the port — disable it when you set these properties explicitly so it does not override your choice.

Chilkat SQL Server Downloads

Download Chilkat for SQL Server

SQL Server

--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    DECLARE @ftp int
    EXEC @hr = sp_OACreate 'Chilkat.Ftp2', @ftp OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    EXEC sp_OASetProperty @ftp, 'Hostname', 'ftp.example.com'
    EXEC sp_OASetProperty @ftp, 'Username', 'myFtpLogin'

    --  Normally you would not hard-code the password in source.  You should instead obtain it
    --  from an interactive prompt, environment variable, or a secrets vault.
    EXEC sp_OASetProperty @ftp, 'Password', 'myPassword'

    --  Ssl = 1 selects IMPLICIT FTPS: TLS begins immediately after the TCP connection, before
    --  the greeting.  Port 990 is conventional for implicit FTPS.  Ssl takes priority over AuthTls
    --  and AuthSsl.
    EXEC sp_OASetProperty @ftp, 'Ssl', 1
    EXEC sp_OASetProperty @ftp, 'Port', 990

    --  AuthSsl selects the legacy AUTH SSL command and is very uncommon -- use AuthTls (explicit
    --  FTPS) for modern servers instead.  Left 0 here.
    EXEC sp_OASetProperty @ftp, 'AuthSsl', 0

    --  AutoFix (default 1) automatically adjusts Ssl/AuthTls/AuthSsl based solely on the Port
    --  (21 or 990).  Disable it when setting these properties explicitly, as here.
    EXEC sp_OASetProperty @ftp, 'AutoFix', 0

    EXEC sp_OAMethod @ftp, 'Connect', @success OUT
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @ftp, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @ftp
        RETURN
      END


    PRINT 'Connected using implicit FTPS.'

    EXEC sp_OAMethod @ftp, 'Disconnect', @success OUT
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @ftp, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @ftp
        RETURN
      END

    EXEC @hr = sp_OADestroy @ftp


END
GO