Opened 7 weeks ago

Closed 6 weeks ago

Last modified 5 weeks ago

#12560 closed Bug report (rejected)

New version FileZilla_3.56.0_win64 causes GnuTLS error

Reported by: Chris Stivers Owned by:
Priority: normal Component: FileZilla Client
Keywords: connection, TLS, unsupported version Cc:
Component version: 3.56.0 win64 Operating system type: Windows
Operating system version: Windows 10 Pro, v 21H1

Description

Connection to host works fine with FileZilla_3.52.2_win64. On installation of 3.56.0 connection fails with "GnuTLS error -8: A packet with illegal or unsupported version was received."

Reinstalling 3.52.2 restores ability to connect.

Attachments (2)

Filezilla message log 2021-10-18.txt (951 bytes ) - added by Chris Stivers 7 weeks ago.
FileZilla-TLS-error-10-26-2021.jpg (34.8 KB ) - added by Phil Johnson 6 weeks ago.
TLS error when connecting

Download all attachments as: .zip

Change History (6)

by Chris Stivers, 7 weeks ago

by Phil Johnson, 6 weeks ago

TLS error when connecting

comment:1 by Tim Kosse, 6 weeks ago

Resolution: rejected
Status: newclosed

Contact your server administrator or server hosting provider to have the server updated, it uses an antique and insecure TLS version one must no longer use.

See https://datatracker.ietf.org/doc/html/rfc8996

comment:2 by yucikala, 5 weeks ago

I understant this argue, whatever this is not imho correct answear.

The problem has only Filezilla. Other products (like winscp), has not problem. I have no chance to change my hosting. Only what i can is use pure FTP.

So this is way to be less secure!

Or to use old version Fillezila (still less secure). Or any other client (more secure...).

So I'm not sure that this decision is the best...

comment:3 by Tim Kosse, 5 weeks ago

WinSCP is insecure, it implements neither opportunistic FTP over TLS nor RFC 8996.

comment:4 by yucikala, 5 weeks ago

Tim, I understand. But maybe is insecure, but if I want use Fillezila, is more secure (bec. I must use pure FTP, if I need connect). Some times is solution not black and white...

Maybe there can be warning - "your FTP over TLS is not byl RFC", are you sure, you want connetc?
Or there can be possibility (checkbox), which can use less secure connection (but more secure then pure FTP).

I wrote to hosting, but i thing, there is no way to change it. I have no force to change hosting now.


Note: See TracTickets for help on using tickets.