[SOLVED]GnuTLS error -8: A record packet with illegal versio

[namijason]

I've read through the threads and didn't see a solution that is applicable here.

I'm running VSFTPD 2.2.2 on my server, and it has played well with Filezilla for the last year. I recently moved out of the country I was previously living in and now I get the above error. The VSFTPD log doesn't show anything out of the ordinary. I can't figure out if its my location, or filezilla having the issue.

I'm using 3.3.5.1 on linux, but my wife's mac is having the same problem when I try using hers.

Thanks in advance.

2011-10-02 23:21:15 9755 2 Status: Connection established, waiting for welcome message...
2011-10-02 23:21:15 9755 2 Trace: CFtpControlSocket::OnReceive()
2011-10-02 23:21:15 9755 2 Response: 220 (vsFTPd 2.2.2)
2011-10-02 23:21:15 9755 2 Trace: CFtpControlSocket::SendNextCommand()
2011-10-02 23:21:15 9755 2 Command: AUTH TLS
2011-10-02 23:21:15 9755 2 Trace: CFtpControlSocket::OnReceive()
2011-10-02 23:21:15 9755 2 Response: 234 Proceed with negotiation.
2011-10-02 23:21:15 9755 2 Status: Initializing TLS...
2011-10-02 23:21:15 9755 2 Trace: CTlsSocket::Handshake()
2011-10-02 23:21:15 9755 2 Trace: CTlsSocket::ContinueHandshake()
2011-10-02 23:21:15 9755 2 Trace: CTlsSocket::OnSend()
2011-10-02 23:21:15 9755 2 Trace: CTlsSocket::OnRead()
2011-10-02 23:21:15 9755 2 Trace: CTlsSocket::ContinueHandshake()
2011-10-02 23:21:16 9755 2 Trace: CTlsSocket::OnRead()
2011-10-02 23:21:16 9755 2 Trace: CTlsSocket::ContinueHandshake()
2011-10-02 23:21:16 9755 2 Trace: Handshake successful
2011-10-02 23:21:16 9755 2 Trace: Cipher: 3DES-CBC, MAC: SHA1
2011-10-02 23:21:16 9755 2 Status: Verifying certificate...
2011-10-02 23:21:16 9755 2 Trace: CFtpControlSocket::SendNextCommand()
2011-10-02 23:21:16 9755 2 Command: USER username
2011-10-02 23:21:16 9755 2 Status: TLS/SSL connection established.
2011-10-02 23:21:16 9755 2 Trace: CTlsSocket::OnRead()
2011-10-02 23:21:16 9755 2 Trace: CFtpControlSocket::OnReceive()
2011-10-02 23:21:16 9755 2 Response: 331 Please specify the password.
2011-10-02 23:21:16 9755 2 Trace: CFtpControlSocket::SendNextCommand()
2011-10-02 23:21:16 9755 2 Command: PASS **********
2011-10-02 23:21:16 9755 2 Trace: CTlsSocket::OnRead()
2011-10-02 23:21:16 9755 2 Trace: CTlsSocket::Failure(-8, 103)
2011-10-02 23:21:16 9755 2 Error: GnuTLS error -8: A record packet with illegal version was received.
2011-10-02 23:21:16 9755 2 Trace: CRealControlSocket::OnClose(103)
2011-10-02 23:21:16 9755 2 Trace: CControlSocket::DoClose(64)
2011-10-02 23:21:16 9755 2 Trace: CFtpControlSocket::ResetOperation(66)
2011-10-02 23:21:16 9755 2 Trace: CControlSocket::ResetOperation(66)
2011-10-02 23:21:16 9755 2 Error: Could not connect to server
2011-10-02 23:21:16 9755 2 Trace: CFileZillaEnginePrivate::ResetOperation(66)

[botg]

My best guess would be incorrect username and/or password.

[namijason]

Yeah its not that. So far all I've been able to come up with is that the error code is from GnuTLS.

GNUTLS_E_UNSUPPORTED_VERSION_PACKET:
A record packet with illegal version was received.

I've also tried to telnet in to try everything manually but I don't know enough of what I am doing to get very far.

$ ftp host.example.com
Connected to host.example.com.
220 (vsFTPd 2.2.2)
Name (host.example.com:me): newguy
234 Proceed with negotiation.
[SSL Cipher DES-CBC3-SHA]
331 Please specify the password.
Password:
ssl_getc: SSL_read failed -1 = 0
421 Service not available, remote server has closed connection
Login failed.
No control connection for command: Success
ftp>

[boco]

Telnet or the Windows FTP.exe do not support TLS/SSL. Your server is rejecting the plain FTP session.

[namijason]

That may be the case, and probably is because the server is set to TLS only. So if it is failing on the telnet, thats only cause I'm trying to troubleshoot from the wrong angle.

The issue, unfortunately if I am understanding correctly is still the GnuTLS error which it is not getting beyond.

I suspect if I set everything to plain it will work fine, but that isn't a suitable longterm solution.

[namijason]

Found the issue and it was server side. For whatever reason and I can't find this in the documentation anywhere, but when I turned off SSL it appeared there was a directory missing /srv/ftp that came up in the plain connection.

Once I added that folder, and turned SSL back on everything worked as advertised.

[sidd]

Dear All
We get this error when we try to upload more then one file
the solution is filezilla doesnot uploads more than one file at a time so for this we have to make small arangement

Please do the following settings in filezilla client go to "File" ----> Site manager ----> Transfer settings ----> Transfer mode should be default & enable (tick ) limit number of simultaneous connections to 1 (one)
say ok .
you will be able to upload more than one one file without getting the error GNUTLS 8

This setting should be done for all users , But for some of the windows user in addition to this the Drag & Drop fails so you have to do additional settings

1. Open a command prompt as administrator. This is important!
Start Menu - All Programs - Accessories: Right Click 'Command Prompt', select 'Run as administrator'

2. Navigate to the Filezilla program directory.
Example (32bit): cd "\Program Files\Filezilla FTP Client"
Example (64bit): cd "\Program Files (x86)\FileZilla FTP Client"
3. Re-register the shell extension.
Type 'regsvr32 fzshellext.dll' (without quotes of course)

4. If you have 64bit OS, you need to perform an additional step.
Type 'regsvr32 fzshellext_64.dll' (no quotes as well)

If you get the reply 'DllRegisterServer in ... succeeded.', you've done it (though you probably still need to reboot your computer).
All The Best
Siddhesh

[boco]

Very clever, citing the Wiki articles.

Tutorial
Using

FileZilla allows transferring more that one file at once (up to 10). You essentially restricting yourself to one at a time.

[sidd]

Yes , But by doing the above setting I got rid of the error
"Gnu TLS error 8 -A record packet with illegal version was received
Disconnected from server : ECONNABORTED -Connection aborted"

If I increase the number of transfer more than 1 I get the error again and it transfers just 1 file out of 3 / 4 uploaded files.
Siddhesh

[boco]

It's no solution, but only a workaround (there are some caveats).