Rebex Q&A Forum - Recent questions

How to quickly cancel a blocked Read call in HTTP(S)

Fri, 19 Jun 2026 02:18:42 +0000

I want to cancel a Read call that has a very long delay after establishing an HTTP connection.

Will it be possible to cancel quickly using Cancellation.Register(() => stream.Close()) as shown below?

Please let me know if there is a correct cancellation method.

Current method in use (simplified)

try
{
    var stream = response.GetResponseStream();
    using var registration = canceltoken.Register(()=> stream.Close());
    while(canceltoken.IsCancellationRequested == false)
    {
        var data = stream.Read(buffer, 0, length);
        ...
    }
}
catch(Exception) when (cancelToken.IsCancellationRequested)
{
    canceled = true;
}
catch(Exception ex)
{
    error = ex.Message;
}

Specify encryption on mailing

Thu, 18 Jun 2026 05:58:05 +0000

We are currently encrypting our mails as described in Encrypting using RSA with OAEP (RSAES-OAEP) .

We have a request from the receiving party to switch the encryption from AES-128 CBC to AES-128 GCM. But it seems MailEncryptionAlgorithm is not that specific. We can specify AES-128 but have no clue as to what 'version' is used.

Is there a way to specify the algorithm that narrowly using Rebex?

X11 forwarding support

Mon, 11 May 2026 07:42:05 +0000

Hi Rebex Team!

I’d like to request support for SSH X11 forwarding in Rebex SSH. A lot of my customers are still relying on this and use our PuTTY integration to do X11. I would like to drop PuTTY and it seems this is one of the most critical parts which is blocking me.

Would you consider adding support for it?

Alternatively, a lower-level API for sending custom channel requests and accepting channel-open requests by type would also make it possible to build this myself.

Regards,
Stefan

Do you have any plans regarding NFS or SMBClient?

Mon, 04 May 2026 07:43:13 +0000

Do you happen to have any plans to develop an NFS Client or an SMB Client?

FtpItemPermissions not set properly

Wed, 22 Apr 2026 07:19:21 +0000

-rwsr-xr-x 1 ROOT SYS1 4096 Feb 01 2024 setuid.sh
-rwxr-sr-x 1 ROOT SPECIAL 512 Feb 01 2024 setgid.sh

I noticed that with the above listing, the SetGid and SetUid bit of the item's Permissions is not set.

TinySFTPServer1.0.23 : sshIPBindings configuration not reflected in UI

Sat, 11 Apr 2026 20:33:27 +0000

< add key="sshIPBindings" value="10.1.1.10" / >

No matter what value(s) are added to the above configuration, the Server IP in the UI never changes to reflect this configuration.

When setting to debug and starting server, the correct sshIPBindings configuration value(s) are shown in the output.

How to obtain the actual file size before the file data transfer begins?

Tue, 31 Mar 2026 14:55:19 +0000

I am using FileServer as an SFTP server. When a user uploads a file, the
CreateFile(DirectoryNode parent, FileNode child) method—implemented via ReadWriteFileSystemProvider, gets triggered.

Within the child object, I can access details such as the file path and filename. However, the length parameter is always 0, even when the actual file size is greater than 0 bytes.

On the other hand, once the upload is completed, the FileUploaded event is triggered, where FileTransferredEventArgs.BytesTransferred correctly provides the actual file size.

My question:
How can I obtain the actual file size before the file data transfer begins in FileServer (SFTP)?

Fatal error 'ProtocolVersion' has been encountered on the local connection end.

Thu, 12 Mar 2026 12:14:28 +0000

I'm trying to setup proxifier+tlsproxy, but can't get it to function properly.
What I am trying to achieve:
Old Software on PC (doesn't support new TLS, can't change destination to local) HTTPS <-> proxifier (certain URLs) HTTPS <-> TLSProxy 127.0.0.99:9500 (and other, separate ports for different URLs) HTTPS <-> TLS 1.2/1.3 Server (Microsoft Azure)

My config looks like this:

  - name: SomeName
    in:
      address: 127.0.0.99
      port: 9500
      protocol: HTTPS
      tlsVersions: TLS10,TLS11,TLS12
      tlsCipherSuites: All

    out:
      address: SomeURL.com
      port: 443
      protocol: HTTPS
      tlsVersions: TLS12,TLS13

    certificate: CertPath.pfx; pwd="SomePassword"

I've also tried overriding SNI and Host but that didn't work either.
In my investigation I've tried:
FireFox (https) <-> proxifier (https) <-> TLSProxy (https) <-> Server

[INF][-]: Connection from 127.0.0.1:31216 accepted on 127.0.0.99:9500.
[INF][-]: Starting tunnel (127.0.0.1:31216) --'HTTPS/TLS10,TLS11,TLS12'--> (9500) --'HTTPS/TLS12,TLS13'--> (SomeURL.com:443).
[INF][I]: Assembly: Rebex.Tls 8.0.9278 for .NET 8
[INF][I]: Starting TLS negotiation.
[DBG][I]: Using TLS 1.2 core.
[DBG][I]: Enabled cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Applicable cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Using modern transport layer.
[DBG][I]: Invalid TLS packet received:
CONNECT ServerIP:443 HTTP/1.1..Host: ServerIP:443....
[DBG][I]: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
[INF][I]: Fatal Alert:ProtocolVersion was sent.
[VRB][I]: Sent TLS packet: 
......F
[WRN][-]: (127.0.0.1) Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
[DBG][-]: Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
 ---> Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
   --- End of inner exception stack trace ---
   at ydw.odm.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.Utils.Functional.FuncUtils.<innerFinally>d__44.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocv.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocu.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukb.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukc.MoveNext()
--- End of stack trace from previous location ---
   at yei.xny.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnx.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnr.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdi.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdg.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.TlsProxy.Core.Tunnel.<Start>d__39.MoveNext()

curl (no arguments) <-> TLSProxy (https) <-> Server

[INF][-]: Connection from 127.0.0.1:31259 accepted on 127.0.0.99:9500.
[INF][-]: Starting tunnel (127.0.0.1:31259) --'HTTPS/TLS10,TLS11,TLS12'--> (9500) --'HTTPS/TLS12,TLS13'--> (SomeURL.com:443).
[INF][I]: Assembly: Rebex.Tls 8.0.9278 for .NET 8
[INF][I]: Starting TLS negotiation.
[DBG][I]: Using TLS 1.2 core.
[DBG][I]: Enabled cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Applicable cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Using modern transport layer.
[DBG][I]: Invalid TLS packet received:
GET / HTTP/1.1..Host: 127.0.0.99:9500..User-Agent: curl/8.18.0..Accept: */*....
[DBG][I]: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
[INF][I]: Fatal Alert:ProtocolVersion was sent.
[VRB][I]: Sent TLS packet: 
......F
[WRN][-]: (127.0.0.1) Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
[DBG][-]: Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
 ---> Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
   --- End of inner exception stack trace ---
   at ydw.odm.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.Utils.Functional.FuncUtils.<innerFinally>d__44.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocv.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocu.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukb.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukc.MoveNext()
--- End of stack trace from previous location ---
   at yei.xny.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnx.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnr.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdi.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdg.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.TlsProxy.Core.Tunnel.<Start>d__39.MoveNext()

curl (https) <-> TLSProxy (https) <-> Server

[INF][O]: Connecting to ServerIP:443 using TlsClientSocket.
[VRB][I]: Received TLS packet: 
...
[INF][O]: Negotiating TLS 1.3, ECDH with secp256r1, AES with 256-bit key in GCM mode, SHA-384.
...
[INF][O]: Connection secured using cipher: TLS 1.3, ephemeral ECDH, AES with 256-bit key in GCM mode, AEAD.
[INF][-]: Established tunnel (127.0.0.1:31856) --'HTTPS/TLS12'--> (9500) --'HTTPS/TLS13'--> (SomeURL.com:443).
[DBG][-]: Endpoints: IN=[127.0.0.1:31856; 127.0.0.99:9500], OUT=[IP:31857; ServerIP:443].

I've tried to catch curl with proxifier, but for some reason it doesn't see curl.
Proxifier tells me this for firefox: Could not connect through proxy 127.0.0.99(127.0.0.99):9500 - Proxy returned incorrect HTTP reply.
Trying test from proxifier (HTTPS) <-> TLSProxy (HTTPS) <-> Server:

Starting: Test 1: Connection to the Proxy Server
IP Address: 127.0.0.99
Connection established
Test passed.
Starting: Test 2: Connection through the Proxy Server
Error : connection to the proxy server was closed unexpectedly. Please make sure that the proxy server protocol and address are correct.
Test failed.

TLSProxy side:

[INF][-]: Connection from 127.0.0.1:33473 accepted on 127.0.0.99:9500.
[INF][-]: Starting tunnel (127.0.0.1:33473) --'HTTPS/TLS10,TLS11,TLS12'--> (9500) --'HTTPS/TLS12,TLS13'--> (SomeURL.com:443).
[INF][I]: Assembly: Rebex.Tls 8.0.9278 for .NET 8
[INF][I]: Starting TLS negotiation.
[DBG][I]: Using TLS 1.2 core.
[DBG][I]: Enabled cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Applicable cipher suites: 0x0C1FFFFFFFFFFFFF.
[DBG][I]: Using modern transport layer.
[DBG][I]: Invalid TLS packet received:
CONNECT SomeURL.com:443 HTTP/1.1..User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)..Host: SomeURL.com:443....
[DBG][I]: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
[INF][I]: Fatal Alert:ProtocolVersion was sent.
[VRB][I]: Sent TLS packet: 
......F
[WRN][-]: (127.0.0.1) Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
[DBG][-]: Cannot start inbound tunnel due to: Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
 ---> Rebex.Net.TlsException: Fatal error 'ProtocolVersion' has been encountered on the local connection end.
   at ydw.odc.MoveNext()
--- End of stack trace from previous location ---
   at ydw.odm.MoveNext()
   --- End of inner exception stack trace ---
   at ydw.odm.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.Utils.Functional.FuncUtils.<innerFinally>d__44.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocv.MoveNext()
--- End of stack trace from previous location ---
   at ydw.ocu.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukb.MoveNext()
--- End of stack trace from previous location ---
   at ydt.ukc.MoveNext()
--- End of stack trace from previous location ---
   at yei.xny.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnx.MoveNext()
--- End of stack trace from previous location ---
   at yei.xnr.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdi.MoveNext()
--- End of stack trace from previous location ---
   at wmh.pdg.MoveNext()
--- End of stack trace from previous location ---
   at Rebex.TlsProxy.Core.Tunnel.<Start>d__39.MoveNext()

Can you help me figuring out, what I am doing wrong?
P.S. I've successfully paired Proxifier with other Proxy-programs, never had any issues, but they are not suitable for changing TLS.

Index was out of range exception in SFTP (Rebex version 7.0.9313)

Fri, 27 Feb 2026 05:34:19 +0000

Hi,

The following error occurs very rarely in Rebex version 7.0.9313:

System.ArgumentOutOfRangeException: Index was out of range. Must be non-negative and less than the size of the collection. (Parameter 'index')
at Rebex.Net.Sftp.adqbk(String p0, Regex p1, ppnka p2, xsttp p3)
at Rebex.Net.Sftp.GetList(String path)

Please understand that we cannot request any more logs, as these are customer logs.

Has this been resolved in version 7.0.9448?

Thank you,

Capture multi-line command being executed from TerminalControl

Wed, 25 Feb 2026 15:14:06 +0000

I have created an SSH client in WinForms (C#) using Rebex.TerminalEmulation.TerminalControl. I am able to successfully connect, execute commands from the terminal and intercept SSH shell commands when the user presses the ENTER key on the control. This works correctly for single-line commands. However, I need a way to capture the complete command when it spans multiple lines and the user presses ENTER.

For example, in the first case (Green), the command “curl -v telnet://google.com:443” is a single-line command. It can be successfully captured as the last line on the TerminalControl using the Screen.GetRegionText() function.

However, in the second case (Red), the command spans two lines. When intercepted using Screen.GetRegionText(), it only captures “:443” instead of the complete command curl -v “telnet://abc.xyz.google.com:443”.

In many scenarios, user may enter commands that span 3, 4, 5, or even more lines in the terminal. Is there a way to properly capture or intercept the full multi-line command instead of just the last line?

SSH PQC Support

Wed, 25 Feb 2026 14:14:03 +0000

I'm using the FileServer component for SFTP transfers, and I'd like to support post-quantum key exchange to protected against harvest-now-decrypt-later attacks.

Could the mlkem768x25519-sha256 and sntrup761x25519-sha512 algorithms be included in a future update please?

Certificate based auth- when will Rebex ssh support ssh agent?

Thu, 12 Feb 2026 15:18:01 +0000

I’ve noticed several forum posts dating back to 2020 asking about support for SSH agents. As of February 2026, there still doesn’t seem to be any update on this feature.

This limitation affects third‑party applications embedding Rebex (such as RoyalTS), which cannot make use of SSH agents. In my case, our infrastructure relies heavily on Azure ARC SSH, but we’re unable to leverage Rebex together with Windows’ ssh-agent.exe.

I’m not a developer, so I can’t judge the complexity of implementing this. However, in today’s environment, SSH agent support feels like a “must‑have” feature to remain relevant.

A formal response in the Q&A section—or any official communication—would be greatly appreciated.

Websocket connection : SSLAceptsAllCertificates = false fails in .NET 9 MAUI but works in Xamarin / .NET 8

Mon, 02 Feb 2026 12:15:47 +0000

We are encountering an SSL/TLS handshake issue with a secure WebSocket (WSS) connection after migrating our app to .NET 9 MAUI (iOS).

Observed behavior:
In Xamarin and .NET 8, setting SSLAcceptsAllCertificates = false works correctly for the WebSocket connection.
In .NET 9 MAUI, the WebSocket connection fails when SSLAcceptsAllCertificates = false.
The same WebSocket connection works when SSLAcceptsAllCertificates = true.

Is there a reason that the issue may be related to:

Stricter SSL/TLS validation or security changes introduced in .NET 9, specifically affecting WSS,or
TLS / certificate compatibility issues

Rebex log file:

026-01-31 18:00:07.571 Opening log file.
2026-01-31 18:00:07.572 INFO FileLogWriter(1)[1] Info: Assembly: Rebex.Common 7.0.8720 for .NET 8.0
2026-01-31 18:00:07.574 INFO FileLogWriter(1)[1] Info: Platform: iOS (Darwin 24.5.0 Darwin Kernel Version 24.5.0: Tue Apr 22 19:48:46 PDT 2025; root:xnu-11417.121.6~2/RELEASEARM64T8103) 64-bit; CLR: .NET 9.0.9
2026-01-31 18:00:28.476 INFO WebSocketClient(2)[1] WebSocket: Connecting to 'wss://xxx.xxx.0.1:port/maintenance'...
2026-01-31 18:00:28.476 INFO WebSocketClient(2)[1] Info: Assembly: Rebex.WebSocket 7.0.8720 for .NET 8.0
2026-01-31 18:00:28.476 INFO WebSocketClient(2)[1] Info: Platform: iOS (Darwin 24.5.0 Darwin Kernel Version 24.5.0: Tue Apr 22 19:48:46 PDT 2025; root:xnu-11417.121.6~2/RELEASEARM64T8103) 64-bit; CLR: .NET 9.0.9
2026-01-31 18:00:28.484 INFO WebSocketClient(2)[16] HTTP: Connecting to 'https://xxx.xxx.0.1:port'...
2026-01-31 18:00:28.713 INFO WebSocketClient(2)[16] TLS: Fatal Alert:HandshakeFailure was received.
2026-01-31 18:00:28.736 ERROR WebSocketClient(2)[16] HTTP: Error while sending request: Rebex.Net.TlsException: Fatal error 'HandshakeFailure' has been reported by the remote connection end.
---> Rebex.Net.TlsException: Fatal error 'HandshakeFailure' has been reported by the remote connection end.
at xoaqd.tfdcv.afkck(Byte[] p0, Int32 p1, Int32 p2)
at xoaqd.gkalo.bafky(Byte[] p0, Int32 p1, Int32 p2)
at xoaqd.gkalo.sbpqr()
--- End of inner exception stack trace ---
at xoaqd.gkalo.sbpqr()
at xoaqd.gkalo.iblqr()
at xoaqd.kkpkm.tfmmk()
at xoaqd.kkpkm.yeisg()
at Rebex.Net.TlsSocket.srugk()
at Rebex.Net.TlsSocket.Negotiate()
at xoaqd.uyyjp.pyfbt(ISocket p0, TlsCipher& p1)
at xoaqd.uyyjp.dxnpe()
at xoaqd.krjti.rzopz()
at xoaqd.krjti.nthub(Boolean p0)
at xoaqd.krjti.bdzva()

Could you please help clarify:

Whether this behavior change is expected for secure WebSocket (WSS) connections in .NET 9 MAUI?
What the recommended approach is to make SSL validation work correctly for WebSockets without disabling certificate checks?

Thank you for your support.

Opening the log file in append mode.

Mon, 19 Jan 2026 13:21:51 +0000

This question was originally asked as this comment by pbisht:

new Rebex.FileLogWriter(logPath, Rebex.LogLevel.Info);

I observed Rebex.FileLogWriter opens the log file in overwrite mode, not append mode. Is it true? Can we do it in append mode or we have to make it custom?

How Can I Convert MBOX Emails to NSF Without Data Loss?

Tue, 13 Jan 2026 13:11:15 +0000

I have a large number of emails stored in MBOX format from an email client, such as Thunderbird. Now I need to migrate these emails to IBM Lotus Notes (NSF format) for official use. The main concern is data integrity. I do not want to lose email content, attachments, folder structure, or metadata during the conversion. Is there any safe and reliable way to convert MBOX emails to NSF without data loss? Please suggest a proper solution.

Rebex.Net.SshException: your trial version is too old.

Thu, 08 Jan 2026 08:06:07 +0000

We just download ssh.net and trial key from the web, but it still complain this error.
Work environment = .NET framework 4.8
Package version = RebexsshShell-7.0.9448-trial.exe

User Creation Clarification - Using SSH Keys for Login

Tue, 06 Jan 2026 17:20:13 +0000

We create a user for SFTP Access and set the user to use a password for login. We want to switch this user to use a key instead.

I want to clarify that this is the correct method.

Create the user
Configure the user for SFTP login and select SSH Key Option.
Generate key for the user: ssh-keygen -t ed25519 -C username
Attach the .pub file generated to the user profile
Send the .pub file to the user for authentication

This is the first time we are dealing with SFTP and keys and want to make sure this is set up correctly.

Are async methods in Rebex truly asynchronous now?

Thu, 11 Dec 2025 03:37:15 +0000

At one point Rebex methods were not truly asynchronous. Are they now?

Also, currently Rebex Async methods do not take CancelationTokens is there a reason for this?

Thanks in advance,

Jonathan

Rebex FileServer not accepting backslash as valid path

Wed, 03 Dec 2025 12:13:00 +0000

Hi there,

We've recently ran into an issue where using backslashes in the path causes SftpPathNotFoundException: Renci.SshNet.Common.SftpPathNotFoundException : Invalid path.

We have some unit tests set up where we spin up the FTP server locally and upload a file successfully with forward slashes. But once we change those to back slashes, the tests break with the above-mentioned exception.

I discovered the AcceptWindowsPaths setting, which I set to true. But nothing changed after setting this to true.

This is a small snippet of our setup:

var fileServer = new FileServer();
fileServer.Settings.AllowedAuthenticationMethods = AuthenticationMethods.Password;
fileServer.Settings.AcceptWindowsPaths = true;

fileServer.Authentication += this.Authenticate;
fileServer.PathAccessAuthorization += this.PathAccessAuthorization;

I would like to know if we did this right, or do we need more configuration? Also, is there an event that we can hook into so we can do the normalization ourselves?

Thank you & kind regards,

Thomas

SyslogMessage TimeStamp property type

Wed, 03 Dec 2025 10:18:34 +0000

The SyslogMessage class had a Timestamp Member described as "Gets the timestamp part of the syslog message as supplied by the client. Only available for messages received by a syslog server."
The type of this member is DateTime? which means that it does not convey the the timezone offset element of the TIMESTAMP field of the message described in RFC5424 so a value of 1985-04-12T19:20:50.52-04:00 would lose information regarding the local time at point of generation.
Should the type not actually be a DateTimeOffset to allow this data to be passed out intact?

Questions regading FileServer (SSH and SFTP)

Sat, 29 Nov 2025 11:06:42 +0000

Working on FileServer component and created server to accept SFTP and SSH connections.

Basic architecture:

[SSH/SFTP Client] -----> [FileServer running on 22 port] -----> [Target SSH/SFTP Server]

Have following questions:

How to change server response text? When telnet to port 22 from command prompt, we see “SSH-2.0-RebexSSH_5.0.9209.0” and there is no option to change this response text to something like “SSH-2.0-MyServer_1.0.0”
How to change or override requested HostName and Port in TunnelRequested event when client requests local port forwarding? Currently these both properties are read only.
Connecting to same server using FileZilla (Directly and via FileServer) but Permissions and Owner/Group properties are different. How to get directory or file Permissions and Owner/Group?

Issue after upgrade to 2.17.3 - shellTypeDefault

Wed, 29 Oct 2025 06:17:56 +0000

Hi,
After ugrading to 2.17.3 (from 2.15.4 i thing) when i try to add a user i receive an error, and when i try to access an old user i get the same error and cannot access the settings page for the user in web gui.

The error i receive is
Could not find the required key 'shellTypeDefault'
in JSON object literal with keys ['shellDefaults','shellHomeDirectory',ShellPath','shellType'] to match with record type 'UserShellSettingsModel' that has fields [optional('shellHomeDirectory'),
optional('shellPath)', optional('shellType'),required('shellTypeDefault')]

So i am guessing it has to do with the new fields ShellHomeDirectory that i see when i try to create a new user, but i cannot enter anything in that field in the webgui.

How can i correct this?

Best regards
Mats Sörhuus

Websocket Memory Usage continually increasing

Mon, 27 Oct 2025 01:43:23 +0000

Hi,

Im am trying to track down an issue with our websocket implementation and wondering if I am doing something wrong or it is an old version issue.

We currently use Rebex WebSocket (R6.5) for .NET 4.6-4.8 Version (6.0.8232.0)

To get at web socket messages we are using the following:-

ArraySegment<Byte> buffer = new ArraySegment<byte>(new Byte[8192]);
WebSocketReceiveResult result;
using ( var ms = new MemoryStream()) {
 do {
result = await m_floorEventSocket.ReceiveAsync(buffer, m_floorEventCancellation);
ms.Write(buffer.Array, buffer.Offset, result.Count);
} while (!result.EndOfMessage);
//Log some data here
//Removed our data processing to rule out any issues.
}

In our visual studio profiler, the memory just usage just continually increases.

I understand that the memory stream will not necessarily be immediately picked up by the GC, but I would have thought after a few hours and the memory having doubled, the GC would kick in.

Just wanted to check if this was the correct way to receive the messages and possibly check if this was an issue that has since been resolved and we need to update.

THanks,

Daniel.

Issue with rsa-sha2-512 in PubkeyAcceptedAlgorithms on RHEL 9

Mon, 13 Oct 2025 10:42:18 +0000

We’ve encountered a problem when using Rebex to connect via SFTP to a RHEL 9 server configured with a restricted set of public key algorithms.
When the server’s sshd_config contains:

PubkeyAcceptedAlgorithms rsa-sha2-512

Rebex fails to authenticate using a valid private key. The error returned is:
A public key corresponding to the supplied private key was not accepted by the server or the user name is incorrect.

---> Rebex.Net.SshException: A public key corresponding to the supplied private key was not accepted by the server or the user name is incorrect.

However, when we modify the configuration to:

PubkeyAcceptedAlgorithms rsa-sha2-512,rsa-sha2-256

the connection succeeds without issue.
This behavior has been reproduced consistently across three separate environments. Below is the relevant stack trace:

at Rebex.Net.SshSession.ahjfn(String p0, String p1, xaxuc`1 p2, SshGssApiCredentials p3, Boolean p4)
at Rebex.Net.SshSession.icobj(String p0, String p1, xaxuc`1 p2)
at Rebex.Net.Sftp.lsqxf.lbomd(String p0, String p1, xaxuc`1 p2, syrio p3)
at Rebex.Net.Sftp.llstr(String p0, String p1, xaxuc`1 p2, syrio p3)
at Rebex.Net.Sftp.Login(String userName, SshPrivateKey privateKey)

Could you please confirm whether Rebex fully supports rsa-sha2-512 as the sole algorithm in PubkeyAcceptedAlgorithms, or if additional configuration is required?

POP3 + OAUTH2 + Office365 - ERR Server Unavailable. 21 on GetMailMessage(n)

Wed, 08 Oct 2025 09:13:14 +0000

hi,
thanks for your awful software and support

using Rebex.Common R6.11 for .NET 4.6-4.8 I get an error 21 on RETR command
(we tried with equal to 1, 10, 100, 1000 with same error result)

We are using (since 2022) a POP client + OAUth2 in Office365, connecting and logging to server seems fine, failing on GetMailMessage()...

                // get list of all messages
            int count = _popClient.GetMessageCount();

            for (int seqNo = count; seqNo >= 1; seqNo--)
            {
                var mail = _popClient.GetMailMessage(seqNo)
... etc etc;

The error raised a few days ago: the Rebex-based client and the envirnoment (OS, ERP software, etc ) has not been upgraded nor re-installed.

My first thought was an issue with server certificates, but log did not raise error with it...
The customer IT specialist checked the server configuration and seems fine

please find attached the full log

Thanks
Gianfranco

2025-10-07 14:45:30.160 Opening log file.
2025-10-07 14:45:30.160 INFO FileLogWriter(5)[1] Info: Assembly: Rebex.Common R6.11 for .NET 4.6-4.8
2025-10-07 14:45:30.160 INFO FileLogWriter(5)[1] Info: Platform: Windows 6.2.9200 32-bit; CLR: 4.0.30319.42000
2025-10-07 14:45:30.160 DEBUG FileLogWriter(5)[1] Info: Culture: en; Windows-1252
2025-10-07 14:45:30.670 DEBUG Pop3(5)[14] Info: State changed from 'Disconnected' to 'Connecting'.
2025-10-07 14:45:30.670 INFO Pop3(5)[14] Info: Connecting to outlook.office365.com:995 using Pop3.
2025-10-07 14:45:30.670 INFO Pop3(5)[14] Info: Assembly: Rebex.Pop3 R6.11 for .NET 4.6-4.8
2025-10-07 14:45:30.676 INFO Pop3(5)[14] Info: Platform: Windows 6.2.9200 32-bit; CLR: 4.0.30319.42000
2025-10-07 14:45:30.676 DEBUG Pop3(5)[14] Info: Culture: en; Windows-1252
2025-10-07 14:45:30.686 INFO Pop3(5)[14] Info: Connecting to 52.98.237.162.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] Proxy: Connecting to 52.98.237.162:995 (no proxy).
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] Proxy: Connection established.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] Info: Connection succeeded.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] Info: Upgrading connection to TLS.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] TLS: Using classic TLS core.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] TLS: Enabled cipher suites: 0x000F3DF7EBE00640.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] TLS: Applicable cipher suites: 0x000F3DF7EBE00640.
2025-10-07 14:45:30.686 DEBUG Pop3(5)[14] TLS: HandshakeMessage:ClientHello was sent.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:ServerHello was received.
2025-10-07 14:45:30.776 INFO Pop3(5)[14] TLS: Negotiating TLS 1.2, RSA with ephemeral ECDH, AES with 256-bit key in GCM mode, AEAD.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: The server supports secure renegotiation.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: Extended master secret is enabled.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:Certificate was received.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:ServerKeyExchange was received.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:ServerHelloDone was received.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: Verifying server certificate ('CN=outlook.com, O=Microsoft Corporation, L=Redmond, S=Washington, C=US').
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: Certificate verification result: Accept
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: Verifying server key exchange signature.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: Using ephemeral ECDH public key exchange with NIST P-256 curve.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:ClientKeyExchange was sent.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: CipherSpec:ChangeCipherSpec was sent.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:Finished was sent.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: CipherSpec:ChangeCipherSpec was received.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] TLS: HandshakeMessage:Finished was received.
2025-10-07 14:45:30.776 INFO Pop3(5)[14] TLS: Connection secured using cipher: TLS 1.2, RSA with ephemeral ECDH, AES with 256-bit key in GCM mode, AEAD.
2025-10-07 14:45:30.776 DEBUG Pop3(5)[14] Info: Connection upgraded to TLS 1.2.
2025-10-07 14:45:30.834 DEBUG Pop3(5)[14] Info: State changed from 'Connecting' to 'Reading'.
2025-10-07 14:45:30.834 INFO Pop3(5)[14] Response: +OK The Microsoft Exchange POP3 service is ready. [TQBJADEAUAAyADkAMwBDAEEAMAAwADIAMwAuAEkAVABBAFAAMgA5ADMALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==]
2025-10-07 14:45:30.834 DEBUG Pop3(5)[14] Info: State changed from 'Reading' to 'Ready'.
2025-10-07 14:45:30.834 DEBUG Pop3(5)[14] Info: State changed from 'Ready' to 'Sending'.
2025-10-07 14:45:30.834 INFO Pop3(5)[14] Command: CAPA
2025-10-07 14:45:30.834 DEBUG Pop3(5)[14] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:45:30.855 INFO Pop3(5)[14] Response: +OK
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Info: State changed from 'Reading' to 'Downloading'.
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Response: TOP
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Response: UIDL
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Response: SASL PLAIN XOAUTH2
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Response: USER
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Response: .
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Info: State changed from 'Downloading' to 'Ready'.
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Info: State changed from 'Ready' to 'Sending'.
2025-10-07 14:45:30.855 INFO Pop3(5)[14] Command: AUTH XOAUTH2
2025-10-07 14:45:30.855 DEBUG Pop3(5)[14] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:45:30.876 INFO Pop3(5)[14] Response: + 
2025-10-07 14:45:30.876 DEBUG Pop3(5)[14] Info: State changed from 'Reading' to 'Ready'.
2025-10-07 14:45:30.876 DEBUG Pop3(5)[14] Info: State changed from 'Ready' to 'Sending'.
2025-10-07 14:45:30.876 INFO Pop3(5)[14] Command: dXNl...RAQE=
2025-10-07 14:45:30.876 DEBUG Pop3(5)[14] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:45:34.150 INFO Pop3(5)[14] Response: +OK User successfully authenticated.
2025-10-07 14:45:34.150 DEBUG Pop3(5)[14] Info: State changed from 'Reading' to 'Ready'.
2025-10-07 14:45:41.016 DEBUG Pop3(5)[1] Info: State changed from 'Ready' to 'Sending'.
2025-10-07 14:45:41.016 INFO Pop3(5)[1] Command: STAT
2025-10-07 14:45:41.016 DEBUG Pop3(5)[1] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:45:41.410 INFO Pop3(5)[1] Response: +OK 729 48731813
2025-10-07 14:45:41.410 DEBUG Pop3(5)[1] Info: State changed from 'Reading' to 'Ready'.
2025-10-07 14:50:40.346 DEBUG Pop3(5)[1] Info: State changed from 'Ready' to 'Sending'.
**2025-10-07 14:50:40.346 INFO Pop3(5)[1] Command: RETR 729
2025-10-07 14:50:40.346 DEBUG Pop3(5)[1] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:50:44.324 INFO Pop3(5)[1] Response: -ERR Server Unavailable. 21
2025-10-07 14:50:44.324 DEBUG Pop3(5)[1] Info: State changed from 'Reading' to 'Ready'.
2025-10-07 14:50:44.340 ERROR Pop3(5)[1] Info: Rebex.Net.Pop3Exception: Server Unavailable. 21
   at Rebex.Net.Pop3.nungs(Boolean p0, Boolean p1, String& p2)
   at Rebex.Net.Pop3.tawse(Int32 p0, Stream p1)
2025-10-07 14:51:15.666 DEBUG Pop3(5)[1] Info: State changed from 'Ready' to 'Sending'.
2025-10-07 14:51:15.666 INFO Pop3(5)[1] Command: QUIT
2025-10-07 14:51:15.666 DEBUG Pop3(5)[1] Info: State changed from 'Sending' to 'Reading'.
2025-10-07 14:51:15.825 INFO Pop3(5)[1] Response: +OK Microsoft Exchange Server POP3 server signing off.
2025-10-07 14:51:15.825 DEBUG Pop3(5)[1] Info: State changed from 'Reading' to 'Downloading'.
2025-10-07 14:51:15.825 DEBUG Pop3(5)[1] TLS: Closing TLS socket.
2025-10-07 14:51:15.825 DEBUG Pop3(5)[1] TLS: Alert:CloseNotify was sent.
2025-10-07 14:51:15.825 DEBUG Pop3(5)[1] Info: State changed from 'Downloading' to 'Disconnected'.

web admin interface shows old version installed.

Tue, 23 Sep 2025 07:56:05 +0000

Hello dear!
I've upgraded to latest build of Rebex Buru SFTP Server but interface of admin still shows v2.11.1

in log:
2025-09-23 09:37:54.223 +03:00 [INF] Buru SFTP Server version 2.17.3 (component version 8.0.9278.0)

Clear browser cache didn't work.

Response on wrong Ethernet interface when using multiple interfaces

Tue, 09 Sep 2025 11:45:10 +0000

Thanks for a good useful software!

We encountered a strange behavior when using Rebex tiny sftp server.

We have a setup with a machine with multiple Ethernet interfaces and when we start Rebex tiny sftp server it lists 3 IP-addresses.
When we connect to the sftp server on the interface for the second IP in that list we get a strange behavior and the connection fail.

We log with wireshark and see the following:
Client send SYN and server answers SYN, ACK asc expected.
After that we could see the client sending an intial packet with information regarding client SSH version (which also will be listed in the server gui), no TCP ack is sent to client. After a while client resends packet again...
But no more traffic is sent from the server.
After about 20-30s a RST,ACK is sent from server to client.

On client side we never get any information about server type or anything else.

When digging deeper we found TCP packets from server addressed to client IP:port (same as above) but where the source IP from server is the first IP in the list.

Our workaround is to just physically unplug all Ethernet interfaces from machine apart from the interface needed while using Rebex sftp server.

TL;DR; Rebex sftp server may answer on first IP even if request comes in on second IP.

Question: Is this even possible or have we missed something?

Tested in 1.0.22, but we think that we saw this in 1.0.15 before doing an update.

Thanks in advance.

Syslog LOCAL Facility Codes

Thu, 28 Aug 2025 10:48:05 +0000

I have found examples online suggesting that a SyslogFacility can be set\get with a "local0" thru "local7" level.

ex... message.Facility = SyslogFacility.local0;

However, I am not able to set these values. Is there a way to use the "local" values?

buru-sftp-server: Change hostname in authentication banner

Thu, 14 Aug 2025 12:07:55 +0000

Is it possible to change the hostname in the authentication banner as it reveals the internal hostname of the server when you login. This is for latest version of buru-sftp-server

I looked under additional ssh settings and other places in the web-ui but couldnt find anything to change this.

HTTPS legacy R4.7 for .net cf-3.5

Thu, 31 Jul 2025 12:25:23 +0000

Hello.

My development environment is .NET CF 3.5 and uses HTTPS for communication. I used the Rebex HTTPS Legacy Trial version (R4.7) without any issues.

After purchasing a license, I downloaded and tested the keyless R5.17 and R5.18 versions, but I received the following error: "A connection attempt failed because the connected party did not properly respond after a period of time, or the established connection failed because the connected host has failed to respond." However, the other server is working properly.
Therefore, I believe I need a key for R4.7, or sample HTTPS client code for keyless R4.7 or R5.17/18.
Or, please let me know of another solution.

zip: Is it possible to zip a string (json file in memory) and save it in a database field (instead to a file)?

Wed, 30 Jul 2025 12:45:47 +0000

zip: Is it possible to zip a string (json file in memory) and save it in a database field (instead to a file)?

Why is my connection being immediately closed?

Sat, 26 Jul 2025 12:14:42 +0000

Binding FTP server to port 21 (explicit mode)...
Binding FTP server to port 990 (implicit mode)...
Starting...
08:09:26.725 Info Server: Starting server.
08:09:26.749 Info Server: Listening for connections at 0.0.0.0:21.
08:09:26.758 Info Server: Listening for connections at 0.0.0.0:990.
08:09:26.765 Info Server: Server started.
FTP server has started and is ready to accept connections.
Log level changed to Debug.
08:09:57.435 Debug Server: Accepted FTP connection from 192.168.0.141:49165.
08:09:57.796 Info Server: FtpSession 1: Started on connection from 192.168.0.141:49165.
08:09:57.816 Debug Info: Starting session.
08:09:57.826 Debug Info: Control connection TLS mode is 'Explicit'.
08:09:57.827 Debug Info: Control connection protection mode is 'Optional'.
08:09:57.837 Debug Info: Data connection protection mode is 'Optional'.
08:09:57.872 Debug Response: 220 Rebex FTP Server ready.
08:09:57.950 Debug Info: Session started.
08:09:58.029 Debug Command: USER Cryptobox
08:09:58.075 Debug Response: 331 Password required for 'Cryptobox'.
08:09:58.096 Debug Command: PASS **********
08:09:58.130 Info Server: FtpSession 1: Authentication for 'Cryptobox' succeeded.
08:09:58.229 Debug FTP: Getting item info on '/': success.
08:09:58.232 Debug Response: 230 User 'Cryptobox' logged in.
08:09:58.244 Debug Command: TYPE A
08:09:58.262 Debug Response: 200 TYPE set to A.
08:09:58.375 Debug Command: PWD
08:09:58.379 Debug Response: 257 "/" is current directory.
08:09:58.388 Debug Command: PASV
08:09:58.441 Debug Info: PASV::binding.
08:09:58.447 Debug Info: PASV::listening(192.168.0.117:56825).
08:09:58.452 Debug Response: 227 Entering Passive Mode (192,168,0,117,221,249)
08:09:58.502 Debug Info: Established data connection to 192.168.0.141:49166 in passive mode.
08:09:58.519 Debug Command: TYPE I
08:09:58.519 Debug Response: 200 TYPE set to I.
08:09:58.531 Debug Command: LIST -l
08:09:58.576 Debug FTP: Getting item info on '/-l': not found.
08:09:58.576 Debug Response: 550 No such directory.
08:09:58.594 Debug Info: Discarding data connection.
08:09:58.684 Debug Info: Closing data connection.
08:09:58.685 Debug Command: QUIT
08:09:58.700 Debug Response: 221 Closing session.
08:09:58.730 Debug Info: Closing session.
08:09:58.755 Debug Info: Shutting down control connection.
08:09:58.764 Debug Info: Awaiting shutdown confirmation from remote end.
08:09:58.785 Debug Info: Shutdown confirmed by remote end.
08:09:58.789 Debug Info: Closing control connection.
08:09:58.812 Debug Info: Session closed.
08:09:58.817 Info Server: FtpSession 1: Closed connection from 192.168.0.141:49165.

Adding files with Rebex.IO.ActionOnExistingFiles.Rename

Fri, 04 Jul 2025 17:54:05 +0000

I want to use Rebex.IO.ActionOnExistingFiles.Rename to rename duplicates but also need to set a custom 'CreationTime' of the file and without knowing its new name there appears to be no way of doing this?

I assume I would be best just checking the file exists before adding and doing this myself?

    using (var zip = new ZipArchive(zipFilename))
    {
        string archiveFilePath = "rename.txt";
        zip.AddFile(new MemoryStream(Encoding.UTF8.GetBytes("old file")), archiveFilePath, Rebex.IO.ActionOnExistingFiles.Rename);
        zip[archiveFilePath].CreationTime = DateTime.Now.AddMonths(-6);

        zip.AddFile(new MemoryStream(Encoding.UTF8.GetBytes("new file")), archiveFilePath, Rebex.IO.ActionOnExistingFiles.Rename);
        zip[archiveFilePath].CreationTime = DateTime.Now;
    }

tlsproxy doesn't start

Thu, 03 Jul 2025 16:13:28 +0000

Dear all, please help if you can. I'm trying to start tlsproxy at Windows Server 2016. My config file 100% has no errors as I use it at another PC. But at this machine the tlsproxy doesn't start. In windows logs I see the following message:

Log Name: Application
Source: Application Error
Date: 7/3/2025 5:06:37 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: via223346
Description:
Faulting application name: tlsproxy.exe, version: 1.10.0.0, time stamp: 0x670de1ad
Faulting module name: ntdll.dll, version: 10.0.14393.7254, time stamp: 0x66ac6ebc
Exception code: 0x060c201e
Fault offset: 0x00000000000cee80
Faulting process id: 0x661c
Faulting application start time: 0x01dbec23b10f61c2
Faulting application path: S:\Service\RebexTlsProxyx64\RebexTlsProxyx64\tlsproxy.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 091f042d-742d-4bee-80f3-7ba85e478c67
Faulting package full name:
Faulting package-relative application ID:

As I see, something wrong with the connection with C:\Windows\SYSTEM32\ntdll.dll. Are there ideas how can I fix the problem and start the application?

Thank you a lot!

TLS Proxy Shell/Command Prompt Opens then Immediately Closes

Mon, 30 Jun 2025 12:03:03 +0000

trying to use tls proxy for forte agent pop3 email but when I run tlsproxy.exe (the only executable option for tls) the shell opens, populates, and immediately shuts down before I can read or use. any ideas? thanks!

GraphClient limit $select

Thu, 26 Jun 2025 13:04:36 +0000

Thanks to this forum, I last week learned that I could use RawOrderBy and RawFilter when using the GraphClient. But is there also a RawSelect somewhere?

I'm asking because I noticed that the options we have for GraphMessageFields (e.g. Default, Info, ...) results in rather poor performance.

To test, I made the calls directly using Microsoft Graph rather than the Rebex component (which I prefer to use because of the excellent support for encrypted messages)

A call with (basically GraphMessageFields.Envelope)

$select=id,subject,internetMessageId,receivedDateTime,from,sender,toRecipients,ccRecipients,bccRecipients,replyTo&$top=1000

takes about 10 times more time than one with (a limited set of what was in GraphMessageFields.Info)

$select=id,subject,receivedDateTime,from,parentFolderId,isRead,hasAttachments&$top=1000

So if I could specify the fields needed, the performance gain of my application would be huge.

GraphClient return most recent messages first

Fri, 20 Jun 2025 17:05:46 +0000

In the GraphClient, I would like to get the output ordered based on the retrieval date. I have been looking at both GetMessageListAsync() and SearchAsync() and neither of them give me the result I want. They both return the number of records I want and I can order them myself but there is no guarantee that they will give you the most recent messages, they could give you older ones.

According to what I found online, this should be possible using pure odata queries where I could do an orderby. Something like

GET /me/mailFolders('inbox')/messages?$orderby=receivedDateTime%20desc&$top=10

The concept I need this for is mailboxes which have an Inbox folder well over 100k messages. To avoid having to load them all, I would like to load the messages received in the last 10 days or the first 2500 (whatever limit I hit first)

TinyTLSProxy on XP - how to proxy from TLS10 to TLS12

Wed, 18 Jun 2025 15:56:06 +0000

Hi!
I am trying to get the command line switches correct to proxy an application that only uses TLS10 to a newer server using TLS12 (or TLS13).
I only see the -toTLS option and when I use that it do not get through.

Does TinyTLSProxy on XP support TLS10 to TLS12 conversion?

How to transfer file between two servers in SFTP using .NET Framework 4.8 / C#?

Wed, 18 Jun 2025 09:09:15 +0000

Below is the code which I am trying to achieve the requirement (using Upload method of FileTransferClient class).

Triying to trasfert file between servers without downloading at aplication side

 private void btnSendFile_Click(object sender, EventArgs e)
    {
        try
        {
            FileTransferClient client = new FileTransferClient();
            client.TransferProgressChanged += new EventHandler<TransferProgressChangedEventArgs>(TransferProgressChanged);
            client.Connect("Server", 22, FileTransferMode.Sftp);
            if (client.IsConnected == true)
            {
                client.Login("AccountName", "AccountPassword");
                if (client.IsAuthenticated == true)
                {
                    client.Upload("/Server1/home/file.txt", "/Server2/home/Downloads");
                }
            }
        }
        catch (Exception Ex)
        {
            MessageBox.Show(Ex.Message);
        }
    }
    void TransferProgressChanged(object sender, TransferProgressChangedEventArgs e)
    {
        //do your operation
    }

How to read data when HttpResponse has no Content-Length

Fri, 13 Jun 2025 07:19:48 +0000

Hi, support

Unusually, some sites (SugarSync) send data without a Content-Length header in the Http response when passing through a proxy server(Fiddler).

In this case, if I read data from the Response Stream, a Connection Closed error occurs immediately. (Of course it will)

Even if KeepAlive is set, the server sends data with a Connection: closed in the Header and closes it immediately after sending.

However, it seems impossible, but is there a way to handle it, even if it is a trick?

Thank you

TLS proxy - SSE channel timeouts

Wed, 11 Jun 2025 11:31:12 +0000

We're using the TLS proxy to expose different services on different ports on port 443. Some of these services use an SSE channnel - that's a chunked connection style event stream that stays up forever. If we bypass the TLS proxy, the connection does stay up indefinitely. Through the proxy, the browser reports an

net::ERR_INCOMPLETE_CHUNKED_ENCODING

after 2 minutes.

And I think why - our config files contain the idleTimeout parameter set to 120. The sample config states the default value is 120. Is there any value that would disable the timeout? Or what is the max value that can be set?

here's the tail end of such an SSE connection - there's a keepalive message from server to client every 15 seconds until the connection gets closed.

2025-06-11 07:00:30.557 [DBG] Tunnel(52226)[#0
'audm-443-127.0.0.1:8189'][-]: Forwarding 20 bytes (IN <== OUT).
2025-06-11 07:00:30.557 [VRB] Tunnel(52226)[#0
'audm-443-127.0.0.1:8189'][-]: IN <== OUT 0000
|66-0D-0A-3A-20-4B-45-45 50-41-4C-49-56-45-0D-0A| f..: KEEPALIVE..
0010 |0D-0A-0D-0A | .... 2025-06-11
07:00:30.557 [VRB] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][I]:
Sent TLS packet: 0000 |17-03-03-00-14-66-0D-0A
3A-20-4B-45-45-50-41-4C| .....f..: KEEPAL 0010
|49-56-45-0D-0A-0D-0A-0D 0A | IVE...... 2025-06-11
07:00:45.559 [VRB] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][O]:
Received TLS packet: 0000 |17-03-03-00-14-66-0D-0A
3A-20-4B-45-45-50-41-4C| .....f..: KEEPAL 0010
|49-56-45-0D-0A-0D-0A-0D 0A | IVE...... 2025-06-11
07:00:45.559 [DBG] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][-]:
Forwarding 20 bytes (IN <== OUT). 2025-06-11 07:00:45.559 [VRB]
Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][-]: IN <== OUT 0000
|66-0D-0A-3A-20-4B-45-45 50-41-4C-49-56-45-0D-0A| f..: KEEPALIVE..
0010 |0D-0A-0D-0A | .... 2025-06-11
07:00:45.559 [VRB] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][I]:
Sent TLS packet: 0000 |17-03-03-00-14-66-0D-0A
3A-20-4B-45-45-50-41-4C| .....f..: KEEPAL 0010
|49-56-45-0D-0A-0D-0A-0D 0A | IVE...... 2025-06-11
07:00:54.830 [DBG] Tunnel(52227)[#0 'audm-443-127.0.0.1:8189'][I]: TLS
socket was closed, 0 bytes of data were received. 2025-06-11
07:00:54.830 [DBG] Tunnel(52227)[#0 'audm-443-127.0.0.1:8189'][-]:
Forwarding from inbound tunnel finished (IN ==> OUT). 2025-06-11
07:00:54.830 [DBG] Tunnel(52227)[#0 'audm-443-127.0.0.1:8189'][-]:
Closing tunnel from 192.168.201.138:51163. 2025-06-11 07:00:54.830
[DBG] Tunnel(52227)[#0 'audm-443-127.0.0.1:8189'][O]:
Alert:CloseNotify was sent. 2025-06-11 07:00:54.830 [VRB]
Tunnel(52227)[#0 'audm-443-127.0.0.1:8189'][O]: Sent TLS packet: .
0000 |15-03-03-00-02-01-00 | .......
2025-06-11 07:00:54.831 [DBG] Tunnel(52227)[#0
'audm-443-127.0.0.1:8189'][O]: TLS socket was closed, 0 bytes of data
were received. 2025-06-11 07:00:54.832 [DBG] Tunnel(52227)[#0
'audm-443-127.0.0.1:8189'][-]: Forwarding from outbound tunnel
finished (IN <== OUT). 2025-06-11 07:00:54.832 [INF] Tunnel(52227)[#0
'audm-443-127.0.0.1:8189'][-]: Tunnel from 192.168.201.138:51163
closed. 2025-06-11 07:01:00.560 [VRB] Tunnel(52226)[#0
'audm-443-127.0.0.1:8189'][O]: Received TLS packet: 0000
|17-03-03-00-14-66-0D-0A 3A-20-4B-45-45-50-41-4C| .....f..: KEEPAL
0010 |49-56-45-0D-0A-0D-0A-0D 0A | IVE......
2025-06-11 07:01:00.560 [DBG] Tunnel(52226)[#0
'audm-443-127.0.0.1:8189'][-]: Forwarding 20 bytes (IN <== OUT).
2025-06-11 07:01:00.560 [VRB] Tunnel(52226)[#0
'audm-443-127.0.0.1:8189'][-]: IN <== OUT 0000
|66-0D-0A-3A-20-4B-45-45 50-41-4C-49-56-45-0D-0A| f..: KEEPALIVE..
0010 |0D-0A-0D-0A | .... 2025-06-11
07:01:00.560 [VRB] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][I]:
Sent TLS packet: 0000 |17-03-03-00-14-66-0D-0A
3A-20-4B-45-45-50-41-4C| .....f..: KEEPAL 0010
|49-56-45-0D-0A-0D-0A-0D 0A | IVE...... 2025-06-11
07:01:00.779 [DBG] Tunnel(52226)[#0 'audm-443-127.0.0.1:8189'][I]:
Rebex.Net.TlsException: The operation was not completed within the
specified time limit. ---> System.TimeoutException: The operation has
timed out.

SSH. TerminalOptions. Current limitation of the number of columns.

Mon, 26 May 2025 16:28:37 +0000

Hello.

For example, I made a limit on the number of terminal columns:

var shell = client.StartScripting(new TerminalOptions() { Columns = 15 });

I can see it in the log - 0F:

2025-05-26 16:47:30.7253|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.729 VERBOSE Ssh(1)[1] SSH: Sending packet SSH_MSG_CHANNEL_REQUEST (46 bytes).
 0000 |62-00-00-00-00-00-00-00 07-70-74-79-2D-72-65-71| b........pty-req
 0010 |01-00-00-00-05-78-74-65 72-6D-00-00-00-0F-00-00| .....xterm......
 0020 |00-19-00-00-00-78-00-00 01-90-00-00-00-00      | .....x........

Now I connect to a host running the alpine operating system and the busybox shell. Their feature is the presence of cursor position control, data about which is transmitted from the client to the server:

025-05-26 16:47:30.7326|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.740 VERBOSE Ssh(1)[11] SSH: Received packet SSH_MSG_CHANNEL_DATA (23 bytes).
 0000 |5E-00-00-00-00-00-00-00 0E-61-6C-70-69-6E-65-3A| ^........alpine:
 0010 |7E-24-20-1B-5B-36-6E                           | ~$ .[6n

...

2025-05-26 16:47:30.7326|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.745 VERBOSE Ssh(1)[1] Info: Received data: 
 0000 |57-65-6C-63-6F-6D-65-20 74-6F-20-41-6C-70-69-6E| Welcome to Alpin
 0010 |65-21-0D-0A-0D-0A-54-68 65-20-41-6C-70-69-6E-65| e!....The Alpine
 0020 |20-57-69-6B-69-20-63-6F 6E-74-61-69-6E-73-20-61|  Wiki contains a
 0030 |20-6C-61-72-67-65-20-61 6D-6F-75-6E-74-20-6F-66|  large amount of
 0040 |20-68-6F-77-2D-74-6F-20 67-75-69-64-65-73-20-61|  how-to guides a
 0050 |6E-64-20-67-65-6E-65-72 61-6C-0D-0A-69-6E-66-6F| nd general..info
 0060 |72-6D-61-74-69-6F-6E-20 61-62-6F-75-74-20-61-64| rmation about ad
 0070 |6D-69-6E-69-73-74-72-61 74-69-6E-67-20-41-6C-70| ministrating Alp
 0080 |69-6E-65-20-73-79-73-74 65-6D-73-2E-0D-0A-53-65| ine systems...Se
 0090 |65-20-3C-68-74-74-70-73 3A-2F-2F-77-69-6B-69-2E| e <https://wiki.
 00A0 |61-6C-70-69-6E-65-6C-69 6E-75-78-2E-6F-72-67-2F| alpinelinux.org/
 00B0 |3E-2E-0D-0A-0D-0A-59-6F 75-20-63-61-6E-20-73-65| >.....You can se
 00C0 |74-75-70-20-74-68-65-20 73-79-73-74-65-6D-20-77| tup the system w
 00D0 |69-74-68-20-74-68-65-20 63-6F-6D-6D-61-6E-64-3A| ith the command:
 00E0 |20-73-65-74-75-70-2D-61 6C-70-69-6E-65-0D-0A-0D|  setup-alpine...
 00F0 |0A-59-6F-75-20-6D-61-79 20-63-68-61-6E-67-65-20| .You may change 
 0100 |74-68-69-73-20-6D-65-73 73-61-67-65-20-62-79-20| this message by 
 0110 |65-64-69-74-69-6E-67-20 2F-65-74-63-2F-6D-6F-74| editing /etc/mot
 0120 |64-2E-0D-0A-0D-0A-61-6C 70-69-6E-65-3A-7E-24-20| d.....alpine:~$ 
 0130 |1B-5B-36-6E                                    | .[6n

2025-05-26 16:47:30.7628|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.762 VERBOSE Ssh(1)[1] SSH: Sending packet SSH_MSG_CHANNEL_DATA (17 bytes).
 0000 |5E-00-00-00-00-00-00-00 08-1B-5B-32-35-3B-31-31| ^.........[25;11
 0010 |52                                             | R

2025-05-26 16:47:30.7628|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.762 DEBUG Ssh(1)[1] Info: Sent 8 bytes of data.

2025-05-26 16:47:30.7628|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:30.762 VERBOSE Ssh(1)[1] Info: Sent data: 
 0000 |1B-5B-32-35-3B-31-31-52                        | .[25;11R

But when I execute a command whose length, together with the length of the prompt string, exceeds the number of columns, the server recalculates the output and splits the command into multiple lines:

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.751 VERBOSE Ssh(1)[1] SSH: Sending packet SSH_MSG_CHANNEL_DATA (17 bytes).
 0000 |5E-00-00-00-00-00-00-00 08-65-63-68-6F-20-24-3F| ^........echo $?
 0010 |0D                                             | .

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.751 DEBUG Ssh(1)[1] Info: Sent 8 bytes of data.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.751 VERBOSE Ssh(1)[1] Info: Sent data: 
 0000 |65-63-68-6F-20-24-3F-0D                        | echo $?.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.751 DEBUG VirtualTerminal(0)[1] Scripting: WaitFor(Line) [Timeout=60000]

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.751 VERBOSE VirtualTerminal(0)[1] Scripting: WaitFor: polling data for max 60000 ms.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.753 VERBOSE Ssh(1)[11] SSH: Received packet SSH_MSG_CHANNEL_DATA (38 bytes).
 0000 |5E-00-00-00-00-00-00-00 1D-65-63-68-6F-20-0D-0D| ^........echo ..
 0010 |0A-24-3F-0D-0A-30-0D-0A 61-6C-70-69-6E-65-3A-7E| .$?..0..alpine:~
 0020 |24-20-1B-5B-36-6E                              | $ .[6n

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.753 VERBOSE VirtualTerminal(0)[1] Scripting: WaitFor: data received, reset last data received time stamp.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.753 VERBOSE VirtualTerminal(0)[1] Scripting: WaitFor: processing received data.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.753 DEBUG Ssh(1)[1] Info: Received 29 bytes of data.

2025-05-26 16:47:33.7480|TRACE|log|SSH:92f9e636-53d6-4ec4-9dcc-fafd2198a486 -> 2025-05-26 16:47:33.753 VERBOSE Ssh(1)[1] Info: Received data: 
 0000 |65-63-68-6F-20-0D-0D-0A 24-3F-0D-0A-30-0D-0A-61| echo ...$?..0..a
 0010 |6C-70-69-6E-65-3A-7E-24 20-1B-5B-36-6E         | lpine:~$ .[6n

The client processes the response from the server and clears only the first line of the command and does not clear wrapped to a new row lines. Then the user receives not quite the expected data.

shell.Prompt = "alpine:~$ ";
shell.SendCommand("echo $?");
var response = shell.ReadUntilPrompt();

The expected data is "0\r\n".
The actual data is "$?\r\n0\r\n".

Does the Rebex library scripting feature have the option to handle such cases?

I can increase the number of columns in the TerminalOptions, but I am limited to 1023, which prevents me from running long commands.

For this example, I deliberately chose a very small value to make it simple and clear. But there is a need to execute very long scripts.

Can you please explain, what is the reason for this limitation, is it possible to increase it?

The RFC initially allows larger values to be specified:

6.2.  Requesting a Pseudo-Terminal

   A pseudo-terminal can be allocated for the session by sending the
   following message.

      byte      SSH_MSG_CHANNEL_REQUEST
      uint32    recipient channel
      string    "pty-req"
      boolean   want_reply
      string    TERM environment variable value (e.g., vt100)
      uint32    terminal width, characters (e.g., 80)
      uint32    terminal height, rows (e.g., 24)
      uint32    terminal width, pixels (e.g., 640)
      uint32    terminal height, pixels (e.g., 480)
      string    encoded terminal modes

Thank you.

Is there a method to avoid using CBC ciphers or weak SSH ciphers in new version of Rebex Tiny SFTP?

Tue, 20 May 2025 15:46:13 +0000

regarding version 1.0.21 (2025-03-10)

When is ServerSession.Current set during login to Sftp Fileserver?

Fri, 16 May 2025 14:01:31 +0000

I've implemented a custom file system to use with Rebex FileServer as an SFTP server. During authentication I create a FileServerUser with a custom session context:

var user = new FileServerUser(e.UserName, null, sftpFileSystem, virtualDirectory);
e.Accept(user, new SftpSessionContext { RequestId = Activity.Current.Id });

According to the documentation the ServerSession.Current should be available within the methods of the custom file system, but during the login process, it seems that the Exists method is called before ServerSession.Current is initialized:

protected override bool Exists(NodePath path, NodeType nodeType)
{
    logger
        .Trace($"SFTP Server: {nameof(Exists)}({path.StringPath})")
        .WithRequestId((ServerSession.Current.Context as SftpSessionContext).RequestId) 
        .Log();
    [...]
}

Calling ServiceSession.Current.Context throws a NullReferenceException and the client shows an authentication failed error.

Is this the excepted behavior within Exists during authentication?

Regards,

Kay Zumbusch

Does Rebex zip can work with long paths?

Tue, 13 May 2025 08:06:23 +0000

From Windows 10 on it is possible to extend the max path length of a file or directory up to 32767 character.

This can be set in the registry described here:
https://learn.microsoft.com/en-us/windows/win32/fileio/maximum-file-path-limitation?tabs=registry#enable-long-paths-in-windows-10-version-1607-and-later

Can Rebex zip use this or work with this setting?
I need to handle very long file paths as our customers create them pretty often.

Thanks

How to implement something similar to sshuttle using Rebex SSH tunnels...?

Sun, 11 May 2025 14:55:06 +0000

Hi,
in Linux there is an opensource tool called sshuttle.
It implements basically sort of a VPN by using a connection to an SSH server, setting up tunnels and updating local routing settings. It can route all traffic (including DNS if need be) through the tunnel.
Rebex can create Incoming and Outgoing tunnels.
But these seem to need specific ports.
Do I need to setup one tunnel per port?
Any hints highly appreciated!
Thanks in advance.

Best Regards
Yahia

How to resolve the exception "connection closed by the server .,make sure you are connecting to an SSH or SFTP server"

Fri, 09 May 2025 05:18:38 +0000

I am getting the exception "connection closed by the server .,make sure you are connecting to an SSH or SFTP server" while connecting to SFTP. It was working few days back without any issue. We are using Rebex 6.0.8372.0. Publc and Private Key pair was created and public key was shared to CB for whuitelisted. Afterwards with Username, pasword, private key path and password we are connecting to CB. please advise on the below asap
Below is th code we are using

string SFTPHost = Convert.ToString(ConfigurationSettings.AppSettings["SFTPHost"]);
string SFTPPort = Convert.ToString(ConfigurationSettings.AppSettings["SFTPPort"]);
string SFTPUserName = Convert.ToString(ConfigurationSettings.AppSettings["SFTPUserName"]);
string SFTPPassword = Convert.ToString(ConfigurationSettings.AppSettings["SFTPPassword"]);
string SFTPPvtKeyPath = Convert.ToString(ConfigurationSettings.AppSettings["SFTPPvtKeyPath"]);
string SFTPPvtKeyPwd = Convert.ToString(ConfigurationSettings.AppSettings["SFTPPvtKeyPwd"]);
//Updated by Alex on 31.01.2022 for SFTP Authentication with Private Key without loading PFX File End

IsActive = objNewSFTP.GetConnectionState();             

WriteLog("ConnectSftp()-SFTP Connection State:" + objNewSFTP.GetConnectionState().Connected, false);
if (IsActive.Connected == false)
{

                WriteLog("ConnectSftp()-SFTP Connectivity Attempted with SFTPHost:" + Convert.ToString(SFTPHost) + Environment.NewLine + "Port:" + Convert.ToInt32(SFTPPort) + "at " + DateTime.Now.ToString(), false);   //Added by Alex on 31.1.2022

                objNewSFTP.Connect(SFTPHost, Convert.ToInt32(SFTPPort));

                WriteLog("ConnectSftp()-SFTP Connectivity Done Successfully at " + DateTime.Now.ToString(), false);   //Added by Alex on 31.1.2022

                //Added  by Alex on 31.01.2022 for SFTP Authentication with Private Key without loading PFX File Start
                WriteLog("ConnectSftp()-Private Key Details before loading-Private Key Path:" + Convert.ToString(SFTPPvtKeyPath) + Environment.NewLine + "at " + DateTime.Now.ToString(), false);

                SshPrivateKey privateKey = new SshPrivateKey(Convert.ToString(SFTPPvtKeyPath), Convert.ToString(SFTPPvtKeyPwd));

                WriteLog("ConnectSftp()-Private Key Details loaded successfully at " + DateTime.Now.ToString(), false);

                WriteLog("ConnectSftp()-SFTP Authentication Details before Login-UserName:" + Convert.ToString(SFTPUserName) + Environment.NewLine + "at " + DateTime.Now.ToString(), false);
                objNewSFTP.Login(Convert.ToString(SFTPUserName), Convert.ToString(SFTPPassword), privateKey);
                //Added  by Alex on 31.01.2022 for SFTP Authentication with Private Key without loading PFX File End

                WriteLog("ConnectSftp()-Completed SFTP Authentication Process at " + DateTime.Now.ToString(), false);
}

How set up Rebex TLS Proxy to establish outbound connection ignoring server certificate problems

Mon, 28 Apr 2025 16:25:27 +0000

Hello dear support.
I'm trying to set the "Rebex TLS Proxy" for my task and I think this is just fine solution.

What I need: I need to have ability to contact all versions of the Internet browsers (primarily IE) to all versions and generations of SSL/TLS servers that I deal with.

My idea is that I set incoming connection to "Rebex TLS Proxy" just using HTTP and outgoing connection to a needed a server via HTTPS.

In case of correct Certificate at server side everything is working fine. But I have several SSL/TLS serves are not always updated and may have incorrect certificates (outdated or something).

The last thing I have faced that there is a problem with cetrificates Authority chain. If I connect directly via the browser I get a message "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store." but it can be ignored and I can still work.
In this case "Rebex TLS Proxy" gives an error message "Certificate verification result: UnknownAuthority". In case I install this certificate to local Trusted Root Certificate Authorities store - it starts working with "Rebex TLS Proxy" also.

My question is: is it possible to set the "Rebex TLS Proxy" to allow outbound SSL/TLS connection ignoring all the errors in server certificate (wrong host name, outdated, no authority etc etc)? Just if there is a physical ability to transfer data - do the transfer.

Thank you a lot!

Buru Server Upgrade 2.17.0

Fri, 11 Apr 2025 10:23:30 +0000

Hello,
after installation of upgrade 2.17.0 the service not running.

Thanks

Rebex TLS Proxy - Problems connecting to Azure SQL

Fri, 21 Mar 2025 16:46:49 +0000

Hi,
I am trying to setup Rebex TLS Proxy to allow us to use legacy applications that doesn't support TLS 1.2 to connect to our Azure SQL manged instance that only supports TLS1.2.

When using this config without cert, the connection somehow fails:

tunnels:
- name: sqlserveraddress.database.windows.net:1433
  in:
    port: 1433
  out:
    address: sqlserveraddress.database.windows.net
    port: 1433
    protocol: TLS
    tlsVersions: TLS12
  idleTimeout: 120


2025-03-21 16:06:01.396 [INF] Tunnel(1)[#0 'server'][O]: Connection secured using cipher: TLS 1.2, RSA with ephemeral ECDH, AES with 256-bit key in GCM mode, AEAD.
2025-03-21 16:06:01.396 [INF] Tunnel(1)[#0 'server'][-]: Established tunnel (127.0.0.1:50058) --'plain'--> (1433) --'TLS12'--> (sqlserveraddress.database.windows.net:1433).
2025-03-21 16:06:01.396 [DBG] Tunnel(1)[#0 'server'][-]: Endpoints: IN=[127.0.0.1:50058; 127.0.0.1:1433], OUT=[10.221.2.8:50059; 10.221.1.201:1433].
2025-03-21 16:06:01.412 [DBG] Tunnel(1)[#0 'server'][I]: Using modern transport layer.
2025-03-21 16:06:01.412 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding 52 bytes (IN ==> OUT).
2025-03-21 16:06:01.412 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding 37 bytes (IN <== OUT).
2025-03-21 16:06:01.412 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding 184 bytes (IN ==> OUT).
2025-03-21 16:06:01.428 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding 196 bytes (IN <== OUT).
2025-03-21 16:06:01.428 [DBG] Tunnel(1)[#0 'server'][O]: TLS socket was closed abruptly.
2025-03-21 16:06:01.428 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding from inbound tunnel finished (IN ==> OUT).
2025-03-21 16:06:01.428 [DBG] Tunnel(1)[#0 'server'][-]: Closing tunnel from 127.0.0.1:50058.
2025-03-21 16:06:01.443 [DBG] Tunnel(1)[#0 'server'][O]: (closing) Rebex.Net.TlsException: Connection was closed by the remote connection end.
2025-03-21 16:06:01.443 [DBG] Tunnel(1)[#0 'server'][-]: (closing) Error while receiving data (IN <== OUT): Rebex.Net.TlsException: Connection was closed by the remote connection end.
2025-03-21 16:06:01.443 [DBG] Tunnel(1)[#0 'server'][-]: Forwarding from outbound tunnel finished (IN <== OUT).
2025-03-21 16:06:01.443 [INF] Tunnel(1)[#0 'server'][-]: Tunnel from 127.0.0.1:50058 closed.

Any clues how I can troubleshoot this?

I thought that perhaps the incoming tunnel would need TLS as well but when trying to add a cert it fails all the time.

tunnels:
- name: sqlserveraddress.database.windows.net:1433
  in:
    port: 1433
    certificate: D:\www.domain.com.cer; key=D:\www.domain.com.pri
    protocol: TLS
    tlsVersions: TLS10,TLS11,TLS12,TLS13
  out:
    address: sqlserveraddress.database.windows.net
    port: 1433
    protocol: TLS
    tlsVersions: TLS12
  idleTimeout: 120

I can validate the certs with command,
tlsproxy certinfo "D:\www.domain.com.cer; keyD:\www.domain.com.pri"
But the config fails with error

Service "RebexTlsProxy" is starting ERROR Cannot start service
'RebexTlsProxy' on computer '.'. System.InvalidOperationException:
Cannot start service 'RebexTlsProxy' on comput er '.'. --->
System.ComponentModel.Win32Exception (1053): The service did not
respond t o the start or control request in a timely fashion. ---
End of inner exception stack trace --- at
System.ServiceProcess.ServiceController.Start(String[] args) at
System.ServiceProcess.ServiceController.Start() at
irq.<>c.bxr(ServiceController wn) at irq.dul(Action1 wi, ServiceControllerStatus wj) at irq.dui() at iru.<>c.wgr(irq xu) at irt.qza[b](String xl, Func2 xm) at iru.pvd(String xq) at
irs.usx() at Rebex.TlsProxy.Cli.SvcStartCliOptionsBase.Run(irs
handler) at iov.Handle(SvcStartStopCliOptionsBase op) at
System.Dynamic.UpdateDelegates.UpdateAndExecute2[T0,T1,TRet](CallSite
site , T0 arg0, T1 arg1) at iov.uvu(VerbOptionsBase f) at
ioz.Main(String[] args)

Adding nothing to the log file, the event log records
YamlDotNet.Core.YamlException: (Line: 4, Col: 5, Idx: 101) - (Line: 4, Col: 5, Idx: 101): Exception during deserialization ---> System.Runtime.Serialization.SerializationException: Property 'certificate' not found on type 'Rebex.TlsProxy.Config.TlsProxyConfiguration+Endpoint'.

Any clues? :)