George Zervakos
2004-09-27 11:42:46 UTC
Hello again list,
I have been fighting with this problem for about a month now and would
appreciate any help since I am running out of things to try. I want to
set up FTPS with proftpd and mod_tls. I compiled proftpd 1.2.10 with
mod_tls:
proftpd -vv
- ProFTPD Version: 1.2.10 (stable)
- Scoreboard Version: 01040002
- Built: Tue Sep 14 13:01:45 EDT 2004
- Module: mod_core.c
- Module: mod_xfer.c
- Module: mod_auth_unix.c
- Module: mod_auth_file.c
- Module: mod_auth.c
- Module: mod_ls.c
- Module: mod_log.c
- Module: mod_site.c
- Module: mod_auth_pam.c
- Module: mod_tls.c
The problem is that FTPS clients cannot establish a TLS connection to
the proftpd server. The proftpd server is not behind any firewalls. My
client is behind a firewall and NAT. I get the following errors in my
log:
Sep 27 09:17:07 mod_tls/2.0.7[13245]: TLS/TLS-C requested, starting TLS
handshake
Sep 27 09:17:10 mod_tls/2.0.7[13245]: unable to accept TLS connection:
Connection reset by peer
Sep 27 09:17:10 mod_tls/2.0.7[13245]: TLS/TLS-C negotiation failed on
control channel
It looks to me like it's the client not liking something here. Here is
what I have tried so far:
1) I can log in to proftpd when I do everything locally on the proftpd
server. I used lftp to make the connection and I can see that I am able
to log in and browse directories. This leads me to believe the server
is functioning ok.
2) I compliled proftpd with mod_tls on another machine and was
successful in connecting to this new installation when using lftp from a
client on the same subnet. I was able to log in, browse trees and even
transfer files with encryption.
3) Thinking the problem could have something to do with my client being
behind a firewall and NAT, I connected my client directly to the
internet in front of the firewall thus taking out the firewall from the
equation. Unfortunately, this did not improve anything. I am still
getting the same error messages about failed TLS negotiations.
Is there anything else I could try? Like I said, it seems to me the
server is functioning OK. I have tried lftp, SmartFTP, and CuteFTP pro.
They all exhibit the same behavior.
Thanks for any help,
George
I have been fighting with this problem for about a month now and would
appreciate any help since I am running out of things to try. I want to
set up FTPS with proftpd and mod_tls. I compiled proftpd 1.2.10 with
mod_tls:
proftpd -vv
- ProFTPD Version: 1.2.10 (stable)
- Scoreboard Version: 01040002
- Built: Tue Sep 14 13:01:45 EDT 2004
- Module: mod_core.c
- Module: mod_xfer.c
- Module: mod_auth_unix.c
- Module: mod_auth_file.c
- Module: mod_auth.c
- Module: mod_ls.c
- Module: mod_log.c
- Module: mod_site.c
- Module: mod_auth_pam.c
- Module: mod_tls.c
The problem is that FTPS clients cannot establish a TLS connection to
the proftpd server. The proftpd server is not behind any firewalls. My
client is behind a firewall and NAT. I get the following errors in my
log:
Sep 27 09:17:07 mod_tls/2.0.7[13245]: TLS/TLS-C requested, starting TLS
handshake
Sep 27 09:17:10 mod_tls/2.0.7[13245]: unable to accept TLS connection:
Connection reset by peer
Sep 27 09:17:10 mod_tls/2.0.7[13245]: TLS/TLS-C negotiation failed on
control channel
It looks to me like it's the client not liking something here. Here is
what I have tried so far:
1) I can log in to proftpd when I do everything locally on the proftpd
server. I used lftp to make the connection and I can see that I am able
to log in and browse directories. This leads me to believe the server
is functioning ok.
2) I compliled proftpd with mod_tls on another machine and was
successful in connecting to this new installation when using lftp from a
client on the same subnet. I was able to log in, browse trees and even
transfer files with encryption.
3) Thinking the problem could have something to do with my client being
behind a firewall and NAT, I connected my client directly to the
internet in front of the firewall thus taking out the firewall from the
equation. Unfortunately, this did not improve anything. I am still
getting the same error messages about failed TLS negotiations.
Is there anything else I could try? Like I said, it seems to me the
server is functioning OK. I have tried lftp, SmartFTP, and CuteFTP pro.
They all exhibit the same behavior.
Thanks for any help,
George