FileZilla Forums

Waiting the bugs to be solved, I have compiled pure-ftpd version from git without TLSv1.3 support, as a workaround. I still have small issues, but most of them are gone.

Some of my users are getting issues with files not uploaded correctly. I'm not sure if they are only using Filezilla or this is also happening with other clients. I also faced this issue while using Filezilla 3.40. Feb 3 13:32:43 server1 pure-ftpd[1058]: (?@x.x.x.x) [INFO] userx is now logged in Feb...

Thank you for your advice! I have installed the git version of pure-ftpd and I can confirm that issue is solved and now I can connect correctly.

I'm using nmap nmap --script ssl-cert,ssl-enum-ciphers -p 21 localhost This is the complete output and TLSv1.3 is not in the list. PORT STATE SERVICE 21/tcp open ftp | ssl-cert: Subject: commonName=censored/organizationName=censored/stateOrProvinceName=censored/countryName=US | Subject Alternative N...

My pure-ftpd server (latest official version 1.0.47) is not compiled with TLSv1.3. | ssl-enum-ciphers: | TLSv1.1: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A | TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A | TLS_DHE_RSA_WITH_A...

TLS v1.2 is still very secure, I don't understand why you dropped it completely and rely only on TLSv1.3 with the risk to create compatibility issues.

I found this thread with users dealing with the same issue
https://github.com/jedisct1/pure-ftpd/issues/99

It is possible to add a patch to run on TLS v1.2, if v1.3 is not enabled or it's not working correctly?

Yes, I saw it. with version 3.40 the icon disappears after "Could not connect to server message". But I was able to get the data,

The same algorithms, but

Protocol TLS1.3 Cipher: AES-256-GCM

Key exchange similar to 3.39 data,

From server logs, on successful connection with version 3.39 I have these. Jan 23 20:58:49 serv.com pure-ftpd[8726]: (?@1.1.111.1) [INFO] userx is now logged in Jan 23 20:58:51 serv.com pure-ftpd[8726]: (userx@1.1.111.1) [INFO] TLS: Enabled TLSv1.2 with ECDHE-RSA-CHACHA20-POLY1305, 256 secret bits c...

Ahh, the icon is there only with version 3.39 when I'm successfully connected.

Public algorithm RSA with 2048 bits
Signature algorithm RSA-SHA256

Protocol TLS1.2 Cypher CHACHA20-POLY1305
Key exchange ECDHE-RSA

My issue is related to latest version 3.40.0-rc2 for Windows 64bit. Version 3.39 is working perfectly, https://ftptest.net/ shows no errors. I own a Fedora 29 server with pure-ftpd-1.0.47, openssl-1.1.1a, gnutls-3.6.5. Trying to connect with Windows client 3.40 I get this error: GnuTLS error -110: T...