Opened 7 months ago

Closed 7 months ago

Last modified 7 months ago

#12560 closed Bug report (rejected)

New version FileZilla_3.56.0_win64 causes GnuTLS error

Reported by: Chris Stivers Owned by:
Priority: normal Component: FileZilla Client
Keywords: connection, TLS, unsupported version Cc:
Component version: 3.56.0 win64 Operating system type: Windows
Operating system version: Windows 10 Pro, v 21H1

Description

Connection to host works fine with FileZilla_3.52.2_win64. On installation of 3.56.0 connection fails with "GnuTLS error -8: A packet with illegal or unsupported version was received."

Reinstalling 3.52.2 restores ability to connect.

Attachments (2)

Filezilla message log 2021-10-18.txt (951 bytes ) - added by Chris Stivers 7 months ago.
FileZilla-TLS-error-10-26-2021.jpg (34.8 KB ) - added by Phil Johnson 7 months ago.
TLS error when connecting

Download all attachments as: .zip

Change History (6)

by Chris Stivers, 7 months ago

by Phil Johnson, 7 months ago

TLS error when connecting

comment:1 by Tim Kosse, 7 months ago

Resolution: rejected
Status: newclosed

Contact your server administrator or server hosting provider to have the server updated, it uses an antique and insecure TLS version one must no longer use.

See https://datatracker.ietf.org/doc/html/rfc8996

comment:2 by yucikala, 7 months ago

I understant this argue, whatever this is not imho correct answear.

The problem has only Filezilla. Other products (like winscp), has not problem. I have no chance to change my hosting. Only what i can is use pure FTP.

So this is way to be less secure!

Or to use old version Fillezila (still less secure). Or any other client (more secure...).

So I'm not sure that this decision is the best...

comment:3 by Tim Kosse, 7 months ago

WinSCP is insecure, it implements neither opportunistic FTP over TLS nor RFC 8996.

comment:4 by yucikala, 7 months ago

Tim, I understand. But maybe is insecure, but if I want use Fillezila, is more secure (bec. I must use pure FTP, if I need connect). Some times is solution not black and white...

Maybe there can be warning - "your FTP over TLS is not byl RFC", are you sure, you want connetc?
Or there can be possibility (checkbox), which can use less secure connection (but more secure then pure FTP).

I wrote to hosting, but i thing, there is no way to change it. I have no force to change hosting now.


Note: See TracTickets for help on using tickets.