Secure file transfer

[Belinda Dermody]

How do I ask this question. This is all new to me right now. A new project. We have an existing data transfer in house application that is old an needs to be replaced. I need some suggestion to where to look.
1. It is secure SSL web based.
2. We have a number of schools and organizations that upload files from there PC's via this site. The user has to login in with a userid and passwd and then it puts them in a unique home directory with an In and Out directory, their files go into an In dir, we have personnel who login using there PC's and are only authorized to go to the directories that they are linked to and pickup these files and make changes and then place them back out there in the Out directory for the school or org to pick up.
3. This application runs on a HP box and the logins and file controls are under a sybase applcation.
4. The designer has been long gone. Is there any products on the market that is similar to this that I can read up on.

[Robert-Jan Goossens]

Hi,

You could take a look at ssh for hpux, link below.

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Inside the link you will find other links to the documentation.

Hope this helps,
Robert-Jan

[Sridhar Bhaskarla]

Hi,

If it is web based, then you should be running your web server in ssl mode. You can install "Strong Apache" that supports ssl. You will need to get SSL certificates from any of the vendors. Your customers will be accessing your website through 'https://" which is secured and encrypted.

You can get Strong Apache from either Application CDs or from software.hp.com.

-Sri

[Laurie Gellatly]

Winscp and scp (uses SSH underneath) can do
the secure transfers. Getting them into the
'right' directories and having the user
account info might be where it does not
fit with your environment. Then again,
maybe that's the part you want to change
anyway?

HTH ...Laurie :{)

[Belinda Dermody]

I already have ssh running on the HP system, I need some time of HTML application that I can load on the PC put the problem is I think is that we do not want to force the schools and organization to get ssh or create keys or stuff.

[Steven E. Protter]

Important Rule:
If you want secure file transfer you can not use ftp.

ftp is not a secureable application. It authenticates in clear text.

There are free text based ssh/scp/sftp programs that you can give free to your users that can interact with the user.

Since you don't want to generate keys, they will always be prompted for a password.

I had it installed on a windows box at home prior to being forced to re-image the machine from the Dell CD.

I probably stored it on my network. If you want it, you can post a request and I'll look further. I got it from tucows or download.com

SEP