Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[Arun Khan]

On Wed, Feb 3, 2016 at 6:29 AM, JITHIN K  wrote:
>
> I have tried all the solutions by searching in google and other search
> engines. Still I am working on it. At the same time I updated the status
> with ILUGC team.
>

It is *not* sufficient to just update us.  You *must* share the links
of the solutions that you have tried otherwise we are in the dark
about your efforts.

I just did a search with the key words string "Error: GnuTLS error -8:
A record packet with illegal version was received."

I see that others have reported similar problems with Filezilla
connecting to vsftpd TLS as well as other servers (using GNU TLS).

Alternately, do you encounter similar error with a command line tool
like curl?  (man curl for usage details)
Do this from behind a firewall as well as a host on the WAN if you
have a VPS server of your own.

-- Arun Khan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[Shakthi Kannan]

Hi,

--- On Wed, Feb 3, 2016 at 5:59 PM, JITHIN K  wrote:
| I have tried all the solutions by searching in google and other search
| engines.
\--

That doesn't tell us what you did. Please describe the steps you
followed and what error/output you got. Also read:

http://www.chiark.greenend.org.uk/~sgtatham/bugs.html

http://www.catb.org/esr/faqs/smart-questions.html

SK

-- 
Shakthi Kannan
http://www.shakthimaan.com
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[JITHIN K]

On Wed, Feb 3, 2016 at 5:17 PM, Shakthi Kannan 
wrote:

> Hi,
>
> --- On Wed, Feb 3, 2016 at 4:49 PM, JITHIN K  wrote:
> | Error: GnuTLS error -8: A record packet with illegal version was
> received.
> | ...
> | Any idea ?
> \--
>
> You are expected to make an attempt to solve the problem before
> sending an e-mail.
>
>   http://lmgtfy.com/?q=A+record+packet+with+illegal+version+was+received
>
> SK
>
> --
> Shakthi Kannan
> http://www.shakthimaan.com
> ___
> ILUGC Mailing List:
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
> ILUGC Mailing List Guidelines:
> http://ilugc.in/mailinglist-guidelines
>


Mr.shakthi,

I have tried all the solutions by searching in google and other search
engines. Still I am working on it. At the same time I updated the status
with ILUGC team.

Thank you.

Regards,
Jithin k
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[Shakthi Kannan]

Hi,

--- On Wed, Feb 3, 2016 at 4:49 PM, JITHIN K  wrote:
| Error: GnuTLS error -8: A record packet with illegal version was received.
| ...
| Any idea ?
\--

You are expected to make an attempt to solve the problem before
sending an e-mail.

  http://lmgtfy.com/?q=A+record+packet+with+illegal+version+was+received

SK

-- 
Shakthi Kannan
http://www.shakthimaan.com
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[JITHIN K]

On Wed, Feb 3, 2016 at 2:10 PM, JITHIN K  wrote:

>
>
> On Wed, Feb 3, 2016 at 12:15 PM, Arun Khan  wrote:
>
>> On Tue, Feb 2, 2016 at 4:28 PM, JITHIN K  wrote:
>> > Hi All,
>> >
>> > 2. Configuration in  vsftpd.conf
>> >
>> > ssl_enable=YES
>> > debug_ssl=YES
>> > allow_anon_ssl=NO
>> > force_local_data_ssl=YES
>> > force_local_logins_ssl=YES
>> > ssl_tlsv1=YES
>> > ssl_sslv2=NO
>> > ssl_sslv3=NO
>> > rsa_cert_file=/etc/ssl/ftp.crt
>> > rsa_private_key_file=/etc/ssl/ftp.key
>> >
>> > 3. vsftp logs shows ""SSL_accept failed: error:1408A0C1:SSL
>> > routines:SSL3_GET_CLIENT_HELLO:no shared cipher"
>>
>> BTW, I copy/pasted the above string and uncle Google listed a possible
>> solution
>>
>>   go to the
>> bottom of the blog.
>>
>> Did you try this yourself?
>>
>> -- Arun Khan
>> ___
>> ILUGC Mailing List:
>> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>> ILUGC Mailing List Guidelines:
>> http://ilugc.in/mailinglist-guidelines
>>
>
>
>
> Hi Arun,
>
> Thanks. I tried this solution now but still connection failed with a
> different error "GnuTLS error - 15:An unexpected TLS packet was received.
>
> I am checking on it.
>
> Thank you.
>
> Regards,
> Jithin K
>
>
>


Hi team,

Still no luck. The filezilla log says,

Status: Connecting to 192.168.0.5:21...
Status: Connection established, waiting for welcome message...
Response: 220 (vsFTPd 2.3.5)
Command: AUTH TLS
Response: 234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command: USER gesftp
Status: TLS/SSL connection established.
Response: 331 Please specify the password.
Command: PASS *
Error: GnuTLS error -8: A record packet with illegal version was received.
Error: Could not connect to server
Status: Waiting to retry...
Status: Connecting to 192.168.0.5:21...
Status: Connection established, waiting for welcome message...
Response: 220 (vsFTPd 2.3.5)
Command: AUTH TLS
Response: 234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command: USER gesftp
Status: TLS/SSL connection established.
Response: 331 Please specify the password.
Command: PASS *
Error: GnuTLS error -8: A record packet with illegal version was received.
Error: Could not connect to server

Any idea ?

Regards,
Jithin K
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[JITHIN K]

On Wed, Feb 3, 2016 at 12:15 PM, Arun Khan  wrote:

> On Tue, Feb 2, 2016 at 4:28 PM, JITHIN K  wrote:
> > Hi All,
> >
> > 2. Configuration in  vsftpd.conf
> >
> > ssl_enable=YES
> > debug_ssl=YES
> > allow_anon_ssl=NO
> > force_local_data_ssl=YES
> > force_local_logins_ssl=YES
> > ssl_tlsv1=YES
> > ssl_sslv2=NO
> > ssl_sslv3=NO
> > rsa_cert_file=/etc/ssl/ftp.crt
> > rsa_private_key_file=/etc/ssl/ftp.key
> >
> > 3. vsftp logs shows ""SSL_accept failed: error:1408A0C1:SSL
> > routines:SSL3_GET_CLIENT_HELLO:no shared cipher"
>
> BTW, I copy/pasted the above string and uncle Google listed a possible
> solution
>
>   go to the
> bottom of the blog.
>
> Did you try this yourself?
>
> -- Arun Khan
> ___
> ILUGC Mailing List:
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
> ILUGC Mailing List Guidelines:
> http://ilugc.in/mailinglist-guidelines
>



Hi Arun,

Thanks. I tried this solution now but still connection failed with a
different error "GnuTLS error - 15:An unexpected TLS packet was received.

I am checking on it.

Thank you.

Regards,
Jithin K
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[JITHIN K]

On Wed, Feb 3, 2016 at 12:10 PM, Arun Khan  wrote:

> On Tue, Feb 2, 2016 at 4:28 PM, JITHIN K  wrote:
> > Hi All,
> >
> > I configured VSFTPD over SSL but failed with "Received TPL alert from
> > Server.Handshake failed (40)" while accessing from FTP client
> (Filezilla).
> > FTP without SSL is working.
>
> Any particular reason why you want VSFTPD with TLS?
>
> sftp is part of the openssh-server package and Filezilla client works
> very well with it; all traffic is encrypted equivalent of TLS in
> VSFTPD.  You can limit the directories that the client can traverse
> etc.
>
> -- Arun Khan
> ___
> ILUGC Mailing List:
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
> ILUGC Mailing List Guidelines:
> http://ilugc.in/mailinglist-guidelines
>

Hi Arun,

Appreciate your response.
My requirement is to encrypt ftp traffic. FTPS and SFTP are the solutions
identified. And selected FTPS. I would appreciate if you have any
suggestion about it.

Regards,
Jithin K
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines

Re: [Ilugc] [ILUGC] FTP over SSL - Handshake failed

[Arun Khan]

On Tue, Feb 2, 2016 at 4:28 PM, JITHIN K  wrote:
> Hi All,
>
> 2. Configuration in  vsftpd.conf
>
> ssl_enable=YES
> debug_ssl=YES
> allow_anon_ssl=NO
> force_local_data_ssl=YES
> force_local_logins_ssl=YES
> ssl_tlsv1=YES
> ssl_sslv2=NO
> ssl_sslv3=NO
> rsa_cert_file=/etc/ssl/ftp.crt
> rsa_private_key_file=/etc/ssl/ftp.key
>
> 3. vsftp logs shows ""SSL_accept failed: error:1408A0C1:SSL
> routines:SSL3_GET_CLIENT_HELLO:no shared cipher"

BTW, I copy/pasted the above string and uncle Google listed a possible solution

  go to the
bottom of the blog.

Did you try this yourself?

-- Arun Khan
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
ILUGC Mailing List Guidelines:
http://ilugc.in/mailinglist-guidelines