550 The supplied message is incomplete.

[ITBlogger]

Hello all,

Getting '550 The supplied message is incomplete. The signature was not verified.' errors when attempting to upload files to IIS 7.5 FTP server using FTPES and FileZilla Client. I've seen that this problem has been entered elsewhere here, but as there has been no fix on the other threads that I've found, I'm opening a new one.

CoreFTP works just fine, but isn't currently supported software in our environment while FileZilla is. FileZilla client works if encryption requirements are turned off on the server. I tried installing FileZilla Server on the server in question to generate a cert to see if that was the problem and while FZ Client can connect and upload to FZ Server just fine with encryption turned on, the problem with IIS 7.5 remains.

I've attached debug info for an upload below.

Thanks for your help,

Alex

Trace: CTlsSocket::OnRead()
Trace: CFtpControlSocket::OnReceive()
Response: 150 Opening BINARY mode data connection.
Trace: CFtpControlSocket::TransferParseResponse()
Trace: code = 1
Trace: state = 4
Trace: CFtpControlSocket::SendNextCommand()
Trace: CFtpControlSocket::TransferSend()
Trace: state = 5
Trace: CTransferSocket::OnConnect
Trace: CTlsSocket::Handshake()
Trace: Trying to resume existing TLS session.
Trace: CTlsSocket::ContinueHandshake()
Trace: CTlsSocket::OnSend()
Trace: CTlsSocket::OnSend()
Trace: CTlsSocket::OnRead()
Trace: CTlsSocket::ContinueHandshake()
Trace: CTlsSocket::OnRead()
Trace: CTlsSocket::ContinueHandshake()
Trace: TLS Handshake successful
Trace: TLS Session resumed
Trace: Cipher: AES-128-CBC, MAC: SHA1
Trace: CTransferSocket::OnConnect
Trace: CTlsSocket::Shutdown()
Trace: CTransferSocket::TransferEnd(1)
Trace: CFtpControlSocket::TransferEnd()
Trace: CTlsSocket::OnRead()
Trace: CFtpControlSocket::OnReceive()
Response: 550 The supplied message is incomplete. The signature was not verified.
Trace: CFtpControlSocket::TransferParseResponse()
Trace: code = 5
Trace: state = 7
Trace: CFtpControlSocket::ResetOperation(2)
Trace: CControlSocket::ResetOperation(2)
Trace: CFtpControlSocket::ParseSubcommandResult(2)
Trace: FileTransferSubcommandResult()
Trace: CFtpControlSocket::ResetOperation(2)
Trace: CControlSocket::ResetOperation(2)
Error: File transfer failed

[botg]

I've never seen that message and unfortunately have no idea what might be causing this.

[boco]

Does the IIS expect a client certificate maybe?

[ITBlogger]

Sorry, haven't been able to respond as I've been busy with other stuff.

There's a bug request in Filezilla's bug track system on the same thing http://trac.filezilla-project.org/ticket/7910

Here's another person with the same problem http://forums.iis.net/t/1163993.aspx Unfortunately, I don't see a solution there or I wouldn't have posted here.

Considering that CoreFTP is able to work with the exact same setup as Filezilla, it's not a problem with IIS, nor with the certificate I'm using on IIS, but rather with something in the way that Filezilla deals with the data connection when encryption is required.

[layser]

This seems to be related to the TLS 1.1 & TLS 1.2 changes that come from IIS prevention of the BEAST attack. I tried CoreFTP and they seem to have taken care of the issue within there client. Has anybody heard any word on this for Filezilla?

[botg]

Dunno, need to see if perhaps a different version of GnuTLS might work.

[moojjoo71]

Here is the fix for Windows Server 2008 R2; IIS 7.5, I applied it today and FileZilla is performing AWESOME again --- http://support.microsoft.com/kb/2888853/

Again this is an IIS issue not a FileZilla....

http://support.microsoft.com/kb/2888853/