in reply to HTTP to FTP proxy

The standard approach does it the other way around:

1) non-anonymous login to the ftp server

2) which queries a password data base on the HTTP server

3) and accepts or denies the password based ftp login.

You didn't tell us much about the FTP and HTTP server and how much control you have over it. On Linux PAM or GSSAPI could be your ticket. On Windows it might be domain accounts.

I've no idea how this could work with certificates.

Replies are listed 'Best First'.
Re^2: HTTP to FTP proxy
by clumsyjedi (Acolyte) on Nov 19, 2010 at 12:13 UTC
    The FTP server is firewalled, the user cannot connect to it directly.

    I have absolutely no control over the FTP server. I have limited control over the HTTPS server.