GnuTLS error -8: A packet with illegal or unsupported version was received.

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
arvobowen
500 Syntax error
Posts: 17
Joined: 2015-07-24 14:22
First name: Arvo
Last name: Bowen

GnuTLS error -8: A packet with illegal or unsupported version was received.

#1 Post by arvobowen » 2021-11-18 21:06

I have two VMs set up using the same version of FileZilla Server (0.9.13b). On ServerA I seem to have no issues when connecting with TLS. On ServerB (a new one I have created) I have an issue connecting using the same client with the same settings...
GnuTLS error -8: A packet with illegal or unsupported version was received.
Is there something I need to do on the server itself to support other TLS versions like TLS 1.2?

User avatar
botg
Site Admin
Posts: 35492
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#2 Post by botg » 2021-11-18 22:48

You absolutely must update those servers. Cheesus fucking crust that's antique....

arvobowen
500 Syntax error
Posts: 17
Joined: 2015-07-24 14:22
First name: Arvo
Last name: Bowen

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#3 Post by arvobowen » 2021-11-19 00:25

LOL I'm trying to but there were features taking out of the newer versions that are no longer available to me in the newer versions. I would love to update so bad. But as old as that version is and as much as I would like to update it, the issue I'm experiencing is not related to the age of the version of Filezilla server I'm running. Like I said, it works fine with no issues on another server. I'm just trying to figure out what is different on the Windows Server 2019 boxes that would allow one to use TLS 1.2 and one to only use TLS 1.0.

arvobowen
500 Syntax error
Posts: 17
Joined: 2015-07-24 14:22
First name: Arvo
Last name: Bowen

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#4 Post by arvobowen » 2021-11-19 15:27

To ask a more pointed question...

FileZilla Server 0.9.13b beta does support TLS 1.2 correct?

User avatar
boco
Contributor
Posts: 26899
Joined: 2006-05-01 03:28
Location: Germany

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#5 Post by boco » 2021-11-19 16:00

No. TLS 1.2 support was added in 0.9.43, according to version history.

https://filezilla-project.org/versions.php?type=server
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

arvobowen
500 Syntax error
Posts: 17
Joined: 2015-07-24 14:22
First name: Arvo
Last name: Bowen

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#6 Post by arvobowen » 2021-11-19 16:27

Thanks boco! Then at this point I'm really confused. LOL

I have 0.9.13b beta running on a server and I have the latest version of FileZilla Client running with minimum version of TLS 1.2 required. It connects with no issues. How is that possible?

On the left is FileZilla Client FTP log (with detailed info) and on the right is the settings from FileZilla Client.
Image

Running these same settings connecting to the second FTP server that should be 100% identical to the first (production and working as seen above) with the exception that the second (non-working) server is on a domain.

User avatar
boco
Contributor
Posts: 26899
Joined: 2006-05-01 03:28
Location: Germany

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#7 Post by boco » 2021-11-20 03:42

That old version does not officially and properly support TLS 1.2. However, I guess it makes no attempt to limit the upper TLS version, if the underlying OpenSSL library supports it (even if only experimental). Therefore, it negotiates whatever is supported by OpenSSL.

However, that doesn't mean it will support any of the security features of TLS 1.2 properly. Plus, it comes with a truckload of security vulnerabilities that will make grown men cry.

Official, proper TLS 1.2 awareness came with 0.9.43.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Please do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

arvobowen
500 Syntax error
Posts: 17
Joined: 2015-07-24 14:22
First name: Arvo
Last name: Bowen

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#8 Post by arvobowen » 2021-11-29 16:03

Unfortunately it looks like it might be time for me to move on from FileZilla Server. There was a small feature that is available in that "old version" (0.9.13b beta) that we have to have. In later versions the feature is now being actively blocked (for now reason other than it was not considered to ever be used by botg in the past). I have requested that this feature not be blocked and allowed but have not really heard any type of acknowledgement that it would be allowed again in the current version.

Anyway, as much as I love the FileZilla dev team and the product because of this I'm having to look for other solutions free/paid that will work for me. Thanks guys!

drmca
550 Permission denied
Posts: 28
Joined: 2019-10-25 20:16
First name: Drm
Last name: Ca

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#9 Post by drmca » 2022-08-11 17:22

I realize that this is an ancient topic but I am seeing these errors in the log of the latest version:

Code: Select all

 GnuTLS error -8: A packet with illegal or unsupported version was received.
Are they anything to be concerned of?

User avatar
botg
Site Admin
Posts: 35492
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#10 Post by botg » 2022-08-12 07:03

It's either antique clients or random garbage.

drmca
550 Permission denied
Posts: 28
Joined: 2019-10-25 20:16
First name: Drm
Last name: Ca

Re: GnuTLS error -8: A packet with illegal or unsupported version was received.

#11 Post by drmca » 2022-08-12 12:11

No idea which clients they use but it is like 80-90% of all connections.

Post Reply