- Upgraded to libunftp v0.20.1
- Fixed builds on Windows
- Compile with Rust 1.79.0
- #171 Ability to obtain User info over HTTP with
--usr-http-url
- #175 Guard against configuration mistakes leading to security issues
- Upgraded to libunftp v0.20.0
- Upgraded other dependencies
- Compile with Rust 1.78.0
- Added support for source IP in REST authentication requests
- Upgraded to the latest version of libunftp
- Upgraded other dependencies
- Upgraded to latest version of libunftp
- Upgraded other dependencies
- Fixed RUSTSEC-2020-0071
- Moved the rooter virtual file system to its own crate.
- Moved the restricting virtual file system to its own crate.
- Upgraded to latest version of the GCS back-end
- #151 Restart when receiving the HUP signal
- Fixed Windows build
- Upgraded dependencies including all crates from https://github.com/bolcom/libunftp
- Upgraded to Rust 1.70.0
- Upgraded dependencies including all crates from https://github.com/bolcom/libunftp The main change here is caching of access tokens in the GCS backend
- The JSON authentication method (
--auth-json-path
) JSON user file (--usr-json-path
) now support gzipped or gzipped+base64-encoded gzip files. The compression makes it possible to fit large configuration files in a Kubernetes configmap for example. - Upgraded to unftp-auth-jsonfile v0.3.0 to support the gzipped or gzipped+base64-encoded auth json
- Fixes from libunftp v0.18.7
- Upgraded dependencies
- Upgraded to Rust 1.65.0
- #126 Now support Elliptic Curve Private keys
- #130 Fixed an issue where SITE MD5 was always disabled
- #127 Removed unneeded tokio features
- Upgraded to Rust 1.64.0
- Upgraded dependencies
- Added support for [tokio-console])(https://github.com/tokio-rs/console), the debugger for async Rust. Enable through
the
tokio_console
compile time feature. - #414 via libunftp: Fixed path display issues for Windows clients.
- #413 via libunftp: Fixed issue where the
OPTS UTF8
command was not handled correctly as seen with the FTP client included in Windows Explorer. - Upgraded dependencies
- #343, Added anti - brute force password guessing feature. Choose from
different failed login attempts policies with
--failed-logins-policy [policy]
: deters successive failed login attempts based onip
,username
or thecombination
. Default iscombination
. The maximum number of failed logins (--failed-max-attempts
) and the time in seconds to unblock (--failed-expire-after
) are also configurable.
-
BREAKING: Changed the format of the message sent in the Google Pub/Sub notifications.
-
Expanded on messages sent in Google Pub/Sub notifications:
- Include a Logout event
- Added a Trace ID field to allowing matching messages pertaining to the same control channel session
- Added a sequence number field to allow message ordering.
- Added the event type as a message attribute to allow for pub/sub message filtering
The message data format is documented in our user documentation at unftp.rs.
- Implemented integration with Google Pub/Sub through the
--ntf-pubsub-project
andntf-pubsub-topic
arguments. Configuring this will send notifications to the pub/sub topic for FTP file system changes and logins for instance. - #33 Implemented graceful shutdown
- Upgraded dependencies
tag: v0.12.12
- Upgraded dependencies, including the latest libunftp
tag: v0.12.11
- Added the
--usr-json-path
argument to allow per-user settings to be specified in a JSON file. This can be the same JSON file specified for--auth-json-path
. See the project README for examples. - #85 Ability to restrict the file system operations that an FTP user can do. Accomplished with above-mentioned per
user
settings (
vfs_perms
property). - #85 Ability to specify a separate root directory per user account (
root
property). - Ability to enable/disable an FTP account. Accomplished with above-mentioned per user settings (
account_enabled
property). - #87 Added ability to enforce mTLS per user (
client_cert
property). - #87 Added ability to check the CN of a user's client certificate (
client_cert.allowed_cn
property). - Upgraded to the latest libunftp and its extentions. See the libunftp changelog for more info.
tag: v0.12.10
- Fixed a bug where logging to Redis stops after some time.
- Added support for the
SITE MD5
command. Use--enable-sitemd5
for the filesystem backend (it is automatically enabled for the GCS storage backend)
tag: v0.12.9
- Added Mutual TLS support with the addition of the
--ftps-client-auth
and--ftps-trust-store
arguments. - The JSON authentication method (
--auth-json-path
) now supports encryption through PBKDF2 encoded passwords. See the unftp-auth-jsonfile documentation for an example.