Page 1 of 1

FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-28 19:10
by c2d2
Logs (debug) from FileZilla Server:

Code: Select all

{Thread:   1} <2021-07-28T19:01:53.121Z> [ST] Settings written to C:\WINDOWS\system32\config\systemprofile\AppData\Local\filezilla-server\settings.xml.
{Thread:   1} <2021-07-28T19:01:57.662Z> [DI] [Ftp Server/Session 12] Session 0x1f6662bbfa0 with ID 12 created.
{Thread:   2} <2021-07-28T19:01:57.673Z> [CO] [Ftp Server/Session 12] AUTH TLS
{Thread:   2} <2021-07-28T19:01:57.673Z> [DD] [Ftp Server/Session 12] securer(1) ENTERING state = 0
{Thread:   2} <2021-07-28T19:01:57.673Z> [DD] [Ftp Server/Session 12] calling tls_layer_->set_certificate_file("c:\wamp64\cert\example.com-key.pem", "c:\wamp64\cert\example.com-crt.pem", "****")
{Thread:   2} <2021-07-28T19:01:57.677Z> [DD] [Ftp Server/Session 12] securer(1) EXITING state = 1
{Thread:   2} <2021-07-28T19:01:57.677Z> [DD] [Ftp Server/Session 12] ~securer(1) ENTERING state = 1
{Thread:   2} <2021-07-28T19:01:57.677Z> [DD] [Ftp Server/Session 12] calling tls_layer_->set_alpn("ftp")
{Thread:   2} <2021-07-28T19:01:57.677Z> [DV] [Ftp Server/Session 12] tls_layer_impl::server_handshake()
{Thread:   2} <2021-07-28T19:01:57.677Z> [DV] [Ftp Server/Session 12] tls_layer_impl::continue_handshake()
{Thread:   2} <2021-07-28T19:01:57.677Z> [DD] [Ftp Server/Session 12] ~securer(1) EXITING state = 2
{Thread:   2} <2021-07-28T19:01:57.677Z> [DD] [Ftp Server/Session 12] tls_layer_impl::on_send()
{Thread:   2} <2021-07-28T19:01:57.677Z> [DV] [Ftp Server/Session 12] tls_layer_impl::continue_handshake()
{Thread:   2} <2021-07-28T19:01:58.726Z> [DD] [Ftp Server/Session 12] tls_layer_impl::on_read()
{Thread:   2} <2021-07-28T19:01:58.726Z> [DV] [Ftp Server/Session 12] tls_layer_impl::continue_handshake()
{Thread:   2} <2021-07-28T19:01:58.726Z> [DD] [Ftp Server/Session 12] TLS handshake: Received CLIENT HELLO
{Thread:   2} <2021-07-28T19:01:58.726Z> [DD] [Ftp Server/Session 12] tls_layer_impl::failure(-8)
{Thread:   2} <2021-07-28T19:01:58.726Z> [ER] [Ftp Server/Session 12] GnuTLS error -8: A packet with illegal or unsupported version was received.
{Thread:   2} <2021-07-28T19:01:58.726Z> [ER] [Ftp Server/Session 12] Control channel closed with error from source 0. Reason: ECONNABORTED - Connection aborted.
{Thread:   1} <2021-07-28T19:01:58.726Z> [ER] [Ftp Server] Session ended with error from source 0. Reason: ECONNABORTED - Connection aborted.
{Thread:   1} <2021-07-28T19:01:58.726Z> [DI] [Ftp Server/Session 12] Session 0x1f6662bbfa0 with ID 12 destroyed.
{Thread:   1} <2021-07-28T19:02:06.929Z> [DD] [Administration Server] tls_layer_impl::on_read()
Totalcommander:

Code: Select all

AUTH TLS
234 Using authentication type TLS.
Could not get server certificate!
SSL_read returned -1, SSL_get_error=1
Socket error: 0
USER
OFFLINE7, error=10050
With TLS 1.2 everything is OK.
Any advice?

PS. I'm using cert from letsencrypt - for sure everything is OK with cert.

PS2. With Filezilla Client everything works on TLS 1.3... so the problem is with Total commander...

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-28 21:22
by botg
Does your third-party client even support TLS 1.3?

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-29 05:09
by c2d2
Yes, but I had to update dll's files:
https://www.ghisler.ch/board/viewtopic.php?t=72104
Now everything works on TLS 1.3.
Thank you :-)

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-29 17:22
by boco
They use OpenSSL 1.1.1g. Please note that 1.1.1g is outdated, OpenSSL is now at 1.1.1k.

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-30 04:31
by c2d2
The problem is where we can find compiled and fresh libaries?

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-30 23:10
by boco
He made a special customized version, so you need to ask him for updating it.

The vanilla OpenSSL changed library names (and much more) after 1.02, so, it will not work with TC.

Re: FileFileZilla Server 1.0.0-rc5 - TLS 1.3 problem

Posted: 2021-07-31 20:34
by botg
If only there were other FTP clients out there that were capable of TLS 1.3 :roll: