PDA

View Full Version : SSl (Connected. Negotiating SSL session)


Stars
05-18-2011, 03:24 PM
Dear ioftpd

i have ioFTPD running on windows 7 profeesional 32bit with ioFTPD v7.7.2

i have a question about ssl. i have this error:

[R] 220 FTP Server ready.
[R] AUTH SSL
[R] 234 AUTH SSL successful.
[R] Connected. Negotiating SSL session
[R] Connection failed (Connection lost)
[R] Delaying for 120 seconds before reconnect attempt #1

My settings:

Host = My server ip

Require_Encrypted_Auth = *
Require_Encrypted_Data = !*

Certificate_Name = ioftpd

Encryption_Protocol = SSL3

and i have this files:
ioftpd.dhp
ioftpd.key
ioftpd.pem

after "site makecert"

can someone help me?

sorry for my bad english

Yil
05-18-2011, 04:19 PM
I think your problem will go away if you comment out the Encryption_Protocol line. By setting this to SSL3 you limit the way the handshake with the client can be performed in a number of ways. That may or may not be a big deal, but I can tell you that sooner or later this would effect data connections which could impact FXP transfers in weird ways.

If you haven't uncommented the line and are using the default settings, then I suggest you enable the 'Log_OpenSSL_Transfer_Errors' (under [network]) and look into the logs/debug.log file (I think that's the right logfile) and see what the actual error OpenSSL is returning so we can get a better idea of what is going on. It's clear the handshake is failing, but not clear the reason for it right now.

Stars
05-18-2011, 04:39 PM
thnx for answer. i have this error in debug.log:

05-18-2011 22:22:43 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:22:45 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:22:49 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:22:53 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:24:53 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:26:53 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:28:34 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:29:14 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:30:17 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:31:09 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:33:12 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:33:16 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 22:33:20 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 23:33:14 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 23:33:18 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
05-18-2011 23:33:22 OpenSSL error: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

I have ssl needed for fxp. what can i do?

Yil
05-18-2011, 06:37 PM
Do you have this in your .ini file:
;Encryption_Protocol = SSL3


Note the ";" at the front disabling this feature.

Stars
05-18-2011, 07:06 PM
i have now Encryption_Protocol = SSL1 and that will works fine..

I have ssl needed for secure fxp..

Thnx for your help