vaishnavi pathipati created NET-743:
---------------------------------------
Summary: FTPS File upload fails with "426 Failure reading network
stream." on TLS 1.3
Key: NET-743
URL: https://issues.apache.org/jira/browse/NET-743
Project: Commons Net
Issue Type: Bug
Components: FTP
Affects Versions: 3.13.0, 3.12.0, 3.11.1, 3.11.0, 3.10.0, 3.9.0
Environment: Independent of the OS.
Apache Commons Net: 3.9.0(Issue is present in 3.13.0)
FTPS Server: vsftpd
Protocol: FTPES with TLSv1.3
Java Version:
java 1.8.0_481-b25
Reporter: vaishnavi pathipati
When using Apache Commons Net 3.9.0 to upload files to a vsftpd FTPS server
over TLSv1.3, file uploads fail intermittently with a 426 Failure reading
network stream error. The issue is observed only with TLSv1.3 and does not
occur with TLSv1.2. The failures are non-deterministic — there is no
correlation between specific files, servers, or upload attempts.
Methods used for upload:
ftpesClient.storeFile(); // primary method for storing files
ftpesClient.appendFile(); // used for transfer-only (no storage)
Observed behavior:
File uploads fail intermittently on certain servers with low network latency
Our application has different options for failed files to be re-uploaded,
Noticed that there are several uploads of the same file, and when the last
upload is successful the size of the file is larger than previous attempts.
The issue is reproducible only with TLSv1.3; TLSv1.2 works without errors
vsftpd server logs:
DEBUG: Client "x.x.x.x", "DATA connection terminated without SSL shutdown.
Buggy client! Integrity of upload cannot be asserted."
DEBUG: Client "x.x.x.x", "SSL shutdown state is: NONE"
DEBUG: Client "x.x.x.x", "SSL shutdown state is: NONE"
DEBUG: Client "x.x.x.x", "SSL ret: 18446744073709551615, SSL error:
error:0A000126:SSL routines::unexpected eof while reading, errno: 0"
FTP response: Client "x.x.x.x", "426 Failure reading network stream."
This issue looks similar to the below issue.
https://issues.apache.org/jira/browse/NET-739
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
