Page 1 of 1

Server stuck after AUTH TLS command

Posted: 2019-12-09 11:09
by akhi_gangwar
Hi All,
I am using FileZilla server and client I have my own on some embedded device. On the embedded device, I am using commands like USER/PASS/ etc to communicate with the ftp server.
Previously I was using only FTP and everything was working fine. Now I configured the Filezilla server for the ftps and generated the certificate file also. Now from my client-side, when I am executing the AUTH TLS command, the server responds - Using authentication type TLS and then it stuck[ No other command after this I am able to execute.
But when I use FileZilla client, it automatically connects.
What is the difference between manually making a connection and Filezilla client making the connection?
Really need help.
LOGS-
000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> Connected on port 21, sending welcome message...
(000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> 220-FileZilla Server 0.9.60 beta
(000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> 220-written by Tim Kosse (tim.kosse@filezilla-project.org)
(000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> 220 Please visit https://filezilla-project.org/
(000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> OPTS UTF8 ON
(000042)09-12-2019 16:23:14 - (not logged in) (10.10.5.34)> 202 UTF8 mode is always enabled. No need to send this command.
(000042)09-12-2019 16:23:17 - (not logged in) (10.10.5.34)> USER akhilesh
(000042)09-12-2019 16:23:17 - (not logged in) (10.10.5.34)> 331 Password required for akhilesh
(000042)09-12-2019 16:23:20 - (not logged in) (10.10.5.34)> PASS ********
(000042)09-12-2019 16:23:20 - akhilesh (10.10.5.34)> 230 Logged on
(000042)09-12-2019 16:23:26 - akhilesh (10.10.5.34)> AUTH TLS
(000042)09-12-2019 16:23:26 - akhilesh (10.10.5.34)> 234 Using authentication type TLS //// stuck here no other command it is receiving.


Thanks

Re: Server stuck after AUTH TLS command

Posted: 2019-12-09 12:52
by botg
Client-side, are you actually performing the TLS handshake?

Re: Server stuck after AUTH TLS command

Posted: 2019-12-11 10:19
by akhi_gangwar
How to perform? After creating TLS and putting the Root certificate, I am just issuing AUTH TLS command and facing this issue.

Re: Server stuck after AUTH TLS command

Posted: 2019-12-13 06:24
by boco
If you are issuing AUTH commands, your client must actually implement FTP over TLS handling (usually through a library like GnuTLS or OpenSSL).

Re: Server stuck after AUTH TLS command

Posted: 2019-12-18 12:39
by akhi_gangwar
HI,
Thanks for that. Since I am using this for the first time, I had gone through all these and created TLS also.
Now I am facing a different problem.
When I am trying to connect, the server says-
Connected, sending the welcome message...
Welcome message
could not send a reply, disconnected.

I have created the client on my embedded device. When I use Filezilla client, everything works well.
What can be the issue?
Thanks

Re: Server stuck after AUTH TLS command

Posted: 2019-12-18 12:43
by botg
If the welcome message cannot be sent, the client has already closed the connection for some reason.

Re: Server stuck after AUTH TLS command

Posted: 2019-12-19 07:09
by akhi_gangwar
Hi,
The client is trying to connect and nothing else it is doing. What can the reasons?

Re: Server stuck after AUTH TLS command

Posted: 2019-12-19 08:18
by botg
Step through the client in a debugger, instruction by instruction if needed, to see why it is closing the connection.

Re: Server stuck after AUTH TLS command

Posted: 2019-12-19 10:51
by akhi_gangwar
It is saying the bad ca cert file. I have generated the certificate on the filezilla server. But for my client, from where I'll get the root certificate?

Re: Server stuck after AUTH TLS command

Posted: 2019-12-19 11:08
by boco
FileZilla Server does not support client certificates.

The FTP server sends the FTP client its certificate. The FTP client then asks the user to review and confirm the certificate. In case of self-signed certificates, every FTP client will ask (and possibly report a broken trust chain at level 0 or 1), as this type of certificate is not issued nor signed by a certificate authority. No root certificate exists for self-signed.

Possible cause of error: FileZilla Server supports TLS 1.2. When generating the certificate, make sure you don't leave any fields empty. It doesn't matter what you enter, but I had error messages galore when I left some of them unfilled.

Re: Server stuck after AUTH TLS command

Posted: 2019-12-19 11:12
by akhi_gangwar

Code: Select all

The FTP server sends the FTP client its certificate. The FTP client then asks the user to review and confirm the certificate.
Can you explain this a bit more? How should I handle this at my client-side? Should I make the root certificate field null? I am using self signed certificates on fileszilla server.

Re: Server stuck after AUTH TLS command

Posted: 2020-01-03 09:54
by akhi_gangwar
I understand this part and now some other error I am facing. Creating a new post with proper information.

Thankyou