Opened 10 years ago

Closed 10 years ago

#10234 closed Bug report (rejected)

"Use explicit FTP over TLS if available" doens't work even when certfiicate correct?

Reported by: Sarah Owned by:
Priority: normal Component: FileZilla Client
Keywords: TLS Filezilla Cc:
Component version: Operating system type: Windows
Operating system version: Win7

Description

I have not been able to access this server with the updated versions of FileZilla - I have asked host and they agree that certificate is there and is correct and in date etc and therefore I should be able to access via TLS and thus a filezilla bug (?)

my version and details

FileZilla Client
----------------

Version:          3.10.1.1

Build information:
  Compiled for:   i686-w64-mingw32
  Compiled on:    x86_64-unknown-linux-gnu
  Build date:     2015-02-01
  Compiled with:  i686-w64-mingw32-gcc (GCC) 4.9.1
  Compiler flags: -g -O2 -Wall -g -fexceptions -std=gnu++11

Linked against:
  wxWidgets:      3.0.3
  GnuTLS:         3.2.21
  SQLite:         3.8.8.2

Operating system:
  Name:           Windows 7 (build 7601, Service Pack 1)
  Version:        6.1
  Platform:       32-bit system

and debug log report - I have to abort it as it sits there and does nothing!

DEBUG

Error:	Directory listing aborted by user
Status:	Resolving address of ftp.websq.uk
Status:	Connecting to 185.52.24.183:21...
Status:	Connection established, waiting for welcome message...
Status:	Initializing TLS...
Status:	Verifying certificate...
Status:	TLS connection established.
Status:	Server does not support non-ASCII characters.
Status:	Connected
Status:	Retrieving directory listing...
Status:	Disconnected from server
Command:	PWD
Response:	257 "/" is your current location
Command:	TYPE I
Response:	200 TYPE is now 8-bit binary
Command:	PASV
Response:	227 Entering Passive Mode (185,52,24,183,85,246)
Command:	MLSD
Error:	Directory listing aborted by user

I can only access via unsecure route which I would rather not

Thank you
Sarah

Change History (3)

comment:1 by Sarah, 10 years ago

Sorry for some reason the debug file reverted to 0 not 3 level - here it is in full again

Status:	Disconnected from server
Status:	Resolving address of ftp.websq.uk
Status:	Connecting to 185.52.24.183:21...
Status:	Connection established, waiting for welcome message...
Status:	Initializing TLS...
Status:	Verifying certificate...
Status:	TLS connection established.
Status:	Server does not support non-ASCII characters.
Status:	Connected
Trace:	Measured latency of 47 ms
Status:	Retrieving directory listing...
Trace:	CFtpControlSocket::SendNextCommand()
Trace:	CFtpControlSocket::ChangeDirSend()
Command:	PWD
Trace:	CFtpControlSocket::OnReceive()
Response:	257 "/" is your current location
Trace:	CFtpControlSocket::ResetOperation(0)
Trace:	CControlSocket::ResetOperation(0)
Trace:	CFtpControlSocket::ParseSubcommandResult(0)
Trace:	CFtpControlSocket::ListSubcommandResult()
Trace:	CFtpControlSocket::SendNextCommand()
Trace:	CFtpControlSocket::TransferSend()
Command:	TYPE I
Trace:	CFtpControlSocket::OnReceive()
Response:	200 TYPE is now 8-bit binary
Trace:	CFtpControlSocket::TransferParseResponse()
Trace:	CFtpControlSocket::SendNextCommand()
Trace:	CFtpControlSocket::TransferSend()
Command:	PASV
Trace:	CFtpControlSocket::OnReceive()
Response:	227 Entering Passive Mode (185,52,24,183,168,70)
Trace:	CFtpControlSocket::TransferParseResponse()
Trace:	CFtpControlSocket::SendNextCommand()
Trace:	CFtpControlSocket::TransferSend()
Command:	MLSD

comment:2 by Sarah, 10 years ago

Error:	Connection timed out
Trace:	CFtpControlSocket::ResetOperation(2114)
Trace:	CControlSocket::ResetOperation(2114)
Trace:	CFtpControlSocket::ResetOperation(2114)
Trace:	CControlSocket::ResetOperation(2114)
Error:	Failed to retrieve directory listing

comment:3 by Tim Kosse, 10 years ago

Resolution: rejected
Status: newclosed

It looks like your server is behind some firewall and this firewall isn't configured properly for explicit FTP over TLS.

Contact your server administrator or server hosting provider for assistance so that the server's firewall can be fixed. They can use https://ftptest.net/ to check their server and firewall configuration.

Note: See TracTickets for help on using tickets.