Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#12560 closed Bug report (rejected)

New version FileZilla_3.56.0_win64 causes GnuTLS error

Reported by: Chris Stivers Owned by:
Priority: normal Component: FileZilla Client
Keywords: connection, TLS, unsupported version Cc:
Component version: 3.56.0 win64 Operating system type: Windows
Operating system version: Windows 10 Pro, v 21H1

Description

Connection to host works fine with FileZilla_3.52.2_win64. On installation of 3.56.0 connection fails with "GnuTLS error -8: A packet with illegal or unsupported version was received."

Reinstalling 3.52.2 restores ability to connect.

Attachments (2)

Filezilla message log 2021-10-18.txt (951 bytes ) - added by Chris Stivers 3 years ago.
FileZilla-TLS-error-10-26-2021.jpg (34.8 KB ) - added by Phil Johnson 3 years ago.
TLS error when connecting

Download all attachments as: .zip

Change History (6)

by Chris Stivers, 3 years ago

by Phil Johnson, 3 years ago

TLS error when connecting

comment:1 by Tim Kosse, 3 years ago

Resolution: rejected
Status: newclosed

Contact your server administrator or server hosting provider to have the server updated, it uses an antique and insecure TLS version one must no longer use.

See https://datatracker.ietf.org/doc/html/rfc8996

comment:2 by yucikala, 3 years ago

I understant this argue, whatever this is not imho correct answear.

The problem has only Filezilla. Other products (like winscp), has not problem. I have no chance to change my hosting. Only what i can is use pure FTP.

So this is way to be less secure!

Or to use old version Fillezila (still less secure). Or any other client (more secure...).

So I'm not sure that this decision is the best...

comment:3 by Tim Kosse, 3 years ago

WinSCP is insecure, it implements neither opportunistic FTP over TLS nor RFC 8996.

comment:4 by yucikala, 3 years ago

Tim, I understand. But maybe is insecure, but if I want use Fillezila, is more secure (bec. I must use pure FTP, if I need connect). Some times is solution not black and white...

Maybe there can be warning - "your FTP over TLS is not byl RFC", are you sure, you want connetc?
Or there can be possibility (checkbox), which can use less secure connection (but more secure then pure FTP).

I wrote to hosting, but i thing, there is no way to change it. I have no force to change hosting now.


Note: See TracTickets for help on using tickets.