Discussion:
Lftp and SSL
Benoit Benoit
2013-02-22 10:34:10 UTC
Permalink
I have problems with lftp and SSL server SSLexplicit and passive mode.
I have installed ubuntu 12.10, and now fedora 18, and i have still the
error with debug 5.
534 invalid security parameters : control session must be secured.
I have installed lftp with the OS package 4.4.2 and after 4.4.3 still
the
same error..Fatal error: *gnutls_handshake*: A TLS fatal alert has been
received
I have uninstall it and compile with openssl and try ... still many
error
and not Login.
I have try set ftp:ssl-verificate_certificate no
set ftp:ssl-auth TLS
set ftp:ssl-protect-datas true
set ftps:initial-prot ""
Nothing to do, i'm not login to my office server.
Excuse my poor english, i'm french.
Thanx for your help.
Neb
Alexander V. Lukyanov
2013-02-22 11:33:56 UTC
Permalink
Post by Benoit Benoit
I have problems with lftp and SSL server SSLexplicit and passive mode.
I have installed ubuntu 12.10, and now fedora 18, and i have still the
error with debug 5.
534 invalid security parameters : control session must be secured.
Try using "open ftps://...".
--
Alexander.
Benoit Benoit
2013-02-22 12:04:20 UTC
Permalink
Hi,
Thx for your help !
Today i use lftp 4.4.2-1 fc18(32bits) in FEDORA 18
I have uninstall the 4.4.3 complile with openssl.
The result of "open ftps://..." is :
"Fatal Error : *gnutls_handshake*: A TLS *packet* with unexpected length
was received."
Post by Alexander V. Lukyanov
Post by Benoit Benoit
I have problems with lftp and SSL server SSLexplicit and passive mode.
I have installed ubuntu 12.10, and now fedora 18, and i have still
the
Post by Benoit Benoit
error with debug 5.
534 invalid security parameters : control session must be secured.
Try using "open ftps://...".
--
Alexander.
Alexander V. Lukyanov
2013-02-22 13:56:01 UTC
Permalink
Post by Benoit Benoit
Hi,
Thx for your help !
Today i use lftp 4.4.2-1 fc18(32bits) in FEDORA 18
I have uninstall the 4.4.3 complile with openssl.
"Fatal Error : *gnutls_handshake*: A TLS *packet* with unexpected length
was received."
Ok, then use plain ftp:// and turn on debug 9 and send the
full debug output here.
--
Alexander.
Benoit Benoit
2013-02-22 14:26:10 UTC
Permalink
Precision : I'm sure it's SSL explicit protocol. It works well with
Filezilla.
I'm sorry, it's an office server i must hide a part of IP server et login.
Thx

Output:

[***@localhost Téléchargements]$ sudo rpm -i lftp-4.4.3-1.i686.rpm
[sudo] password for supervisor:
attention : lftp-4.4.3-1.i686.rpm: Entête V4 DSA/SHA1 Signature, clé ID
f2a99a18: NOKEY
[***@localhost Téléchargements]$ lftp
lftp :~> set ftp:passive-mode true
lftp :~> set ftp:ssl-protect-data true
lftp :~> debug 9
lftp :~> open ftp://195.XXX.160.XX:990
---- Résolution de l'adresse...
---- 1: adresse trouvée: 195.XXX.160.XX
lftp 195.XXX.160.XX:~> login ZZZ
Mot de passe :
lftp ***@195.XXX.160.XX:~> ls
---- Connexion à 195.XXX.160.XX (195.XXX.160.XX) port 990
<--- 220 Welcome to Synchrony Gateway FTP server
---> FEAT
<--- 530 Not logged in
---> AUTH TLS
<--- 234 AUTH command OK, waiting handshake
---> USER ZZZ
**** gnutls_handshake: Une alerte TLS fatale a été reçue.
---- Fermeture du socket de contrôle
---- Connexion à 195.XXX.160.XX (195.XXX.160.XX) port 990
<--- 220 Welcome to Synchrony Gateway FTP server
---> FEAT
<--- 530 Not logged in
---> USER ZZZ
<--- 534 Invalid security parameters: control session must be secured
---> QUIT
---- Fermeture du socket de contrôle
ls: L'authentification a échoué.: 534 Invalid security parameters: control
session must be secured
lftp ***@195.XXX.160.XX:~>

Thx a lot for your help !
Post by Alexander V. Lukyanov
Post by Benoit Benoit
Hi,
Thx for your help !
Today i use lftp 4.4.2-1 fc18(32bits) in FEDORA 18
I have uninstall the 4.4.3 complile with openssl.
"Fatal Error : *gnutls_handshake*: A TLS *packet* with unexpected length
was received."
Ok, then use plain ftp:// and turn on debug 9 and send the
full debug output here.
--
Alexander.
Alexander V. Lukyanov
2013-02-25 05:06:37 UTC
Permalink
Post by Benoit Benoit
Precision : I'm sure it's SSL explicit protocol. It works well with
Filezilla.
Please try "set ftp:ssl-auth SSL".
--
Alexander.
Benoit Benoit
2013-02-22 15:40:27 UTC
Permalink
Same error with lftp 4.4.3 compile with openssl.
With 4.4.3 i can't set ssl-protect-data true . This option doesn't exist
Strange !
Post by Alexander V. Lukyanov
Post by Benoit Benoit
Hi,
Thx for your help !
Today i use lftp 4.4.2-1 fc18(32bits) in FEDORA 18
I have uninstall the 4.4.3 complile with openssl.
"Fatal Error : *gnutls_handshake*: A TLS *packet* with unexpected length
was received."
Ok, then use plain ftp:// and turn on debug 9 and send the
full debug output here.
--
Alexander.
Loading...