ssl trouble

[psyko]

i have just updated to the latest ffxp version (3.0.2...) and now i get this error:

[L] Connected. Negotiating TLSv1 session..
[L] error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
[L] 425 Can't open data connection.

i never had this error with older versions.

any idea?

[Linkster]

use the search function...it works well. Change to AUTH-SSL. Your site doesn't support AUTH-TLS. In older versions, FlashFXP incorrectly issued AUTH-SSL even when AUTH-TLS was selected.

[psyko]

not working. that site supports both, auth-tls and auth-ssl.

i'm using some kind of proxy (modified hpbnc with dynamic target-host) to connect to that site... workx with 3.0.

[bigstar]

I'm really not sure, It should work exactly the same compared to v3.0. I didn't make any internal changes to the ssl/tls routines in v3.0.2.. The only change to ssl/tls was to auto close the certificate dialog when the ftp connection is lost.

The change linkster is referring to occured in v3.0 and not 3.0.2

[psyko]

1. reinstalled 3.0 build 1015. works fine.
2. installed 3.0.2 build 1044 again...

[L] PWD
[L] 257 "/" is current directory.
[L] TYPE A
[L] 200 Type set to A.
[L] PROT P
[L] 200 Protection set to Private
[L] PASV
[L] 227 Entering Passive Mode (111,222,333,444,555,66)
[L] Opening data connection IP: 111.222.333.444 PORT: 59220
[L] LIST -al
[L] Connected. Negotiating TLSv1 session..
[L] error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
(soft abort)
[L] ABOR
[L] 425 Can't open data connection.
[L] List Error

[bigstar]

Would it be possible to give me access to this ftp server so that I can debug the situation? You can send me a private message with the info.

[redpoint]

Interesting, I can confirm this bug. Usually I don't use hpbnc, but I tested this now. I found a couple of versions in my backups.

It works with a version 3.0 Build 1010 RC4.

It does not work with 3.0.1.1039
It does not work with 3.0.2 build 1044

Maybe it's possible for the developers to test with hpbnc. It's called "hpbnc.v1.5 test2".

Ftp server is glftpd.

[bigstar]

I have no way of testing this setup. If someone can provide me with a test site I can look into this further.

[djrob]

Looks a bit like this:

http://forum.flashfxp.com/showthread...&threadid=4671

(which still is a major problem)

[bigstar]

Actually this bug has nothing to do with ssl. There is a bug in the proxy support (except types socks/http) in v3.0.2.. We will be releasing an update very soon to address this issue.

[MadCowFred]

I'm having the same issue, but with a PureFTPd server. Not sure if older FlashFXP versions work, though. lftp (UNIX client) can connect fine. I can make a test account available if you need one

FlashFXP v3.0.2 (build 1045)
PureFTPD v1.0.20

[L] 200 PORT command successful
[L] LIST -al
[L] Connected. Negotiating TLSv1 session..
[L] 150 Connecting to port 10153
[L] error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
[L] error:14095044:SSL routines:SSL3_READ_N:internal error

[bigstar]

Is this a public site that we can test?

[MadCowFred]

Just enabled anonymous, ftp://zort.madcowdisease.org

[bigstar]

There appears to be a problem with FlashFXP

The server is returning an error indicating a secure data connection is not allowed or supported and FlashFXP is not taking this into consideration and trying to establish a secure connection anyways.

[08:25:41] 250 OK. Current directory is /
[08:25:41] PWD
[08:25:41] 257 "/" is your current location
[08:25:41] TYPE A
[08:25:41] 200 TYPE is now ASCII
[08:25:42] PROT P
[08:25:42] 534 Fallback to [C]

In this case FlashFXP should revert to unsecure mode for the data connection.

Thank you for your bug report, this will be resolved in the next release.

[Fifer]

hi , exact same problem here , glad you you are already on the case. Just wanted to know if there is a temp soloution to this niggling bug ?

Thanks for youre kind assistance.






P.S a Happy Flash fxp user