FTP over TLS fails on IIS without all patches installed

[Thomas Hallbert]

First I connect to the server with the client and it is fast and no problems. I open the folders on server and on my pc so I can make a transfer. I doubleclick to transfer a file, and it reacts allright, but then it reports an error and for a slight second I can see the file in the list on the serverfolder and then it disappears. So instead of updating the file on the server the file is now missing!!!!
I tried several times. This occured just after upgrading the client on automatic suggestion. Which I have done before without problems. Now this is extra annoying as it is the last thing I wanted to do before going on a travel tomorrow morning. And now instead of having an updated website I have a website with 2 missing files.
Here is a copy of the report:

Status: Resolving address of s219191705.onlinehome.fr
Status: Connecting to 82.165.174.120:21...
Status: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Status: Connected
Status: Retrieving directory listing...
Status: Calculating timezone offset of server...
Status: Timezone offsets: Server: 3600 seconds. Local: 3600 seconds. Difference: 0 seconds.
Status: Directory listing of "/u46581113" successful
Status: Resolving address of s219191705.onlinehome.fr
Status: Connecting to 82.165.174.120:21...
Status: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Status: Connected
Status: Starting upload of E:\Hallon\Hemsidor\Brocante Albinque\sieges.htm
Command: CWD /u46581113
Response: 250 CWD command successful.
Command: PWD
Response: 257 "/u46581113" is current directory.
Command: TYPE A
Response: 200 Type set to A.
Command: PASV
Response: 227 Entering Passive Mode (82,165,174,120,202,118).
Command: STOR sieges.htm
Response: 150 Opening ASCII mode data connection.
Response: 550 The supplied message is incomplete. The signature was not verified.
Error: File transfer failed
Status: Starting upload of E:\Hallon\Hemsidor\Brocante Albinque\sieges.htm
Status: Retrieving directory listing of "/u46581113"...
Command: TYPE I
Response: 200 Type set to I.
Command: PASV
Response: 227 Entering Passive Mode (82,165,174,120,202,122).
Command: LIST
Response: 150 Opening BINARY mode data connection.
Response: 226 Transfer complete.
Command: TYPE A
Response: 200 Type set to A.
Command: PASV
Response: 227 Entering Passive Mode (82,165,174,120,202,123).
Command: STOR sieges.htm
Response: 150 Opening ASCII mode data connection.
Response: 550 The supplied message is incomplete. The signature was not verified.
Error: File transfer failed
Status: Starting upload of E:\Hallon\Hemsidor\Brocante Albinque\sieges.htm
Status: Retrieving directory listing of "/u46581113"...
Command: TYPE I
Response: 200 Type set to I.
Command: PASV
Response: 227 Entering Passive Mode (82,165,174,120,202,133).
Command: LIST
Response: 150 Opening BINARY mode data connection.
Response: 226 Transfer complete.
Command: TYPE A
Response: 200 Type set to A.
Command: PASV
Response: 227 Entering Passive Mode (82,165,174,120,202,135).
Command: STOR sieges.htm
Response: 150 Opening ASCII mode data connection.
Response: 550 The supplied message is incomplete. The signature was not verified.
Error: File transfer failed
Status: Retrieving directory listing of "/u46581113"...
Status: Directory listing of "/u46581113" successful

[RichardD]

Same problem here - FileZilla tries to upload the file three times, gets a "550 The supplied message is incomplete. The signature was not verified" response, and then the file is deleted from the server.

---

FileZilla Client
----------------

Version:          3.10.1.1

Build information:
  Compiled for:   i686-w64-mingw32
  Compiled on:    x86_64-unknown-linux-gnu
  Build date:     2015-02-01
  Compiled with:  i686-w64-mingw32-gcc (GCC) 4.9.1
  Compiler flags: -g -O2 -Wall -g -fexceptions -std=gnu++11

Linked against:
  wxWidgets:      3.0.3
  GnuTLS:         3.2.21
  SQLite:         3.8.8.2

Operating system:
  Name:           Windows 8.1 (build 9600), 64-bit edition
  Version:        6.3
  Platform:       64-bit system

---

Status:	Connection established, waiting for welcome message...
Status:	Initializing TLS...
Status:	Verifying certificate...
Status:	TLS connection established.
Status:	Connected
Status:	Retrieving directory listing...
Status:	Directory listing of "/" successful
Status:	Calculating timezone offset of server...
Status:	Timezone offsets: Server: 0 seconds. Local: 0 seconds. Difference: 0 seconds.
Status:	Starting upload of E:\text.txt
Command:	STOR test.txt
Response:	150 Opening ASCII mode data connection.
Response:	550 The supplied message is incomplete. The signature was not verified. 
Error:	File transfer failed
Status:	Starting upload of E:\test.txt
Status:	Retrieving directory listing of "/"...
Command:	STOR test.txt
Response:	150 Opening ASCII mode data connection.
Response:	550 The supplied message is incomplete. The signature was not verified. 
Error:	File transfer failed
Status:	Starting upload of E:\test.txt
Status:	Retrieving directory listing of "/"...
Command:	STOR test.txt
Response:	150 Opening ASCII mode data connection.
Response:	550 The supplied message is incomplete. The signature was not verified. 
Error:	File transfer failed
Status:	Retrieving directory listing of "/"...
Status:	Directory listing of "/" successful

[Michael]

I get the same exact behavior after upgrading to 3.10.1.1

[RichardD]

Problem persists after downgrading to 3.10.1; downgrading to 3.10.0.2 resolves the problem.

[Tim Kosse]

550 The supplied message is incomplete. The signature was not verified.

This is a known bug in IIS. Microsoft has already released a patch for it. Your server administrator needs to install it.

[RichardD]

Thanks - installing this patch on the server resolved the issue:
​http://support.microsoft.com/kb/2888853/

[Michael]

When I ran the patch for my selected server, I get the following message:

"The update is not applicable to your computer."

I'm on Windows Server 2008 R2 with the latest KB updates installed.

The problem persists. Please see attached screenshot.

This is happening on two different Windows 2008 R2 servers on two different hosts, both the with the latest updates installed. Please advise. The problem was introduced with the latest version of Filezilla. It is corrected only by reverted back to the previous version.

[Michael]

Replying to mtcg:

When I ran the patch for my selected server, I get the following message:

"The update is not applicable to your computer."

I'm on Windows Server 2008 R2 with the latest KB updates installed.

In researching this, I discovered that multiple Windows hosting companies make it a policy not to install service packs unless explicitly asked. They install security fixes and high-priority updates, but service packs are not installed due to possible issues with other software (read: to avoid liability issues).

I suspect then, given how popular these two Windows hosting companies are, that this is a widespread issue for those using TLS and the latest version of Filezilla.

Curiously, every single other third-party FTP software package outside of Filezilla will work fine. It is only Filezilla 3.10.1.1 that is of issue.

[Tim Kosse]

Have you tried FTP over TLS with these third-party FTP clients?

In any case, this is a bug in your server and can only be fixed by applying the patch Microsoft has provided, including any required service packs.

[zk2k]

FTP over TLS works with other ftp clients like Cyberduck.

Please change your mind and fix it.

[Tim Kosse]

This ticket is about a known bug in IIS. The only way to fix this issue is by installing all IIS patches provided by Microsoft.