"Received certificate chain could not be verified. Verification status is 1048576."

Come here to discuss FileZilla and FTP in general

Moderator: Project members

Post Reply
Message
Author
riahc3
504 Command not implemented
Posts: 11
Joined: 2012-10-03 13:53
First name: First Name
Last name: Last Name

"Received certificate chain could not be verified. Verification status is 1048576."

#1 Post by riahc3 » 2019-04-14 17:59

Im trying to connect via plain FTP to port 21 to a IIS FTP site and I get this error message

Received certificate chain could not be verified. Verification status is 1048576.

Why is it trying to connect via FTPS instead of FTP? And on top of that, how do I fix that error?

User avatar
boco
Contributor
Posts: 24718
Joined: 2006-05-01 03:28
Location: Germany

Re: "Received certificate chain could not be verified. Verification status is 1048576."

#2 Post by boco » 2019-04-14 23:06

FileZilla always attempts to connect using FTP over TLS first. This is to ensure that any clueless user does not miss out on encryption if (s)he simply enters the server Hostname. Plain FTP is used if the server rejects the AUTH TLS and AUTH SSL commands. Badly configured servers are not supported and will fail.

Forcing plain FTP is only possible through the Site Manager (set Encryption to Plain (Insecure)).
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 32404
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: "Received certificate chain could not be verified. Verification status is 1048576."

#3 Post by botg » 2019-04-15 06:52

The server has stapled invalid OCSP response to the handshake. Contact your server administrator or server hosting provider for assistance so that the server can be fixed.

riahc3
504 Command not implemented
Posts: 11
Joined: 2012-10-03 13:53
First name: First Name
Last name: Last Name

Re: "Received certificate chain could not be verified. Verification status is 1048576."

#4 Post by riahc3 » 2019-04-15 18:36

botg wrote:
2019-04-15 06:52
The server has stapled invalid OCSP response to the handshake. Contact your server administrator or server hosting provider for assistance so that the server can be fixed.
I am server administrator.

This is odd.... It seems it cannot reach http://localhost/CertEnroll/MyCA.domain ... -we.CA.crt when I can indeed access it and read it.

riahc3
504 Command not implemented
Posts: 11
Joined: 2012-10-03 13:53
First name: First Name
Last name: Last Name

Re: "Received certificate chain could not be verified. Verification status is 1048576."

#5 Post by riahc3 » 2019-04-15 19:02

I decided to remove that... http://localhost/ocsp was working so I just attach one location and thats it.

riahc3
504 Command not implemented
Posts: 11
Joined: 2012-10-03 13:53
First name: First Name
Last name: Last Name

Re: "Received certificate chain could not be verified. Verification status is 1048576."

#6 Post by riahc3 » 2019-04-15 19:04

botg wrote:
2019-04-15 06:52
The server has stapled invalid OCSP response to the handshake. Contact your server administrator or server hosting provider for assistance so that the server can be fixed.
BTW, might want to fix that error message as it leads to false searching. The certificate chain is and was correct.

Post Reply