Re: [ILUGC] FTP over SSL - Handshake failed

JITHIN K <[email protected]> Wed, 3 Feb 2016 16:49:15 +0530
Newsgroups gmane.org.user-groups.linux.ilugc
Message-ID <CABe_ZfKqHjv=9wahtZ-PfjzSe=rLxBVpEpZVHcZ5S9iRY1m82g@mail.gmail.com>
On Wed, Feb 3, 2016 at 2:10 PM, JITHIN K <[email protected]> wrote:

>
>
> On Wed, Feb 3, 2016 at 12:15 PM, Arun Khan <[email protected]> wrote:
>
>> On Tue, Feb 2, 2016 at 4:28 PM, JITHIN K <[email protected]> wrote:
>> > Hi All,
>> >
>> > 2. Configuration in  vsftpd.conf
>> >
>> > ssl_enable=YES
>> > debug_ssl=YES
>> > allow_anon_ssl=NO
>> > force_local_data_ssl=YES
>> > force_local_logins_ssl=YES
>> > ssl_tlsv1=YES
>> > ssl_sslv2=NO
>> > ssl_sslv3=NO
>> > rsa_cert_file=/etc/ssl/ftp.crt
>> > rsa_private_key_file=/etc/ssl/ftp.key
>> >
>> > 3. vsftp logs shows ""SSL_accept failed: error:1408A0C1:SSL
>> > routines:SSL3_GET_CLIENT_HELLO:no shared cipher"
>>
>> BTW, I copy/pasted the above string and uncle Google listed a possible
>> solution
>>
>> <http://xmodulo.com/secure-ftp-service-vsftpd-linux.html>  go to the
>> bottom of the blog.
>>
>> Did you try this yourself?
>>
>> -- Arun Khan
>> _______________________________________________
>> ILUGC Mailing List:
>> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>> ILUGC Mailing List Guidelines:
>> http://ilugc.in/mailinglist-guidelines
>>
>
>
>
> Hi Arun,
>
> Thanks. I tried this solution now but still connection failed with a
> different error "GnuTLS error - 15:An unexpected TLS packet was received.
>
> I am checking on it.
>
> Thank you.
>
> Regards,
> Jithin K
>
>
>


Hi team,

Still no luck. The filezilla log says,

Status: Connecting to 192.168.0.5:21...
Status: Connection established, waiting for welcome message...
Response: 220 (vsFTPd 2.3.5)
Command: AUTH TLS
Response: 234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command: USER gesftp
Status: TLS/SSL connection established.
Response: 331 Please specify the password.
Command: PASS *********
Error: GnuTLS error -8: A record packet with illegal version was received.
Error: Could not connect to server
Status: Waiting to retry...
Status: Connecting to 192.168.0.5:21...
Status: Connection established, waiting for welcome message...
Response: 220 (vsFTPd 2.3.5)
Command: AUTH TLS
Response: 234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command: USER gesftp
Status: TLS/SSL connection established.
Response: 331 Please specify the password.
Command: PASS *********
Error: GnuTLS error -8: A record packet with illegal version was received.
Error: Could not connect to server

Any idea ?

Regards,
Jithin K
_______________________________________________
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines