SSL Wildcard error

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
stefano.fontanini
500 Command not understood
Posts: 1
Joined: 2018-10-04 10:31
First name: Stefano
Last name: Fontanini

SSL Wildcard error

#1 Post by stefano.fontanini » 2018-10-04 10:43

Hi,
i'm trying to use a Thawte ssl wildcard with my filezilla server but i have some problems
I configure server side like this
Image https://ibb.co/hMSypK

with
private key = chiaveprivata.crt
certificate = hypertecs.it.crt
and password

when i try to connect from a filezilla client in ftps i have this certificate error

Image https://ibb.co/hd62Gz

All the certificate information are correct, i can't understand where i'm wrong
Can someone hep me please?
Thanks

User avatar
botg
Site Admin
Posts: 31605
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: SSL Wildcard error

#2 Post by botg » 2018-10-04 11:57

There's nothing wrong then. The trust model of FileZilla is user-guided TOFU. Users need to compare the displayed fingerprint with the fingerprint they have received from the server administrator over a secure channel, e.g. a piece of paper handed over personally.


This is more secure than a trust model involving certificate authorities. With user-guided TOFU one can even use FileZilla to securely transfer nuclear launch codes. In a CA world on the other hand there are thousands of CAs, each technically being able to issue certificates for anyone to anyone. Imagine for example Russian CA issuing certificates for a US government agency after a bribe from a Chinese spy. With trust delegated to CAs, this the fraudulent certificate would be accepted without raising any alarm.

Post Reply