CoreFTP implicit FTPS errors when SSLv3 disabled on server

Core FTP client questions and answers
Post Reply
ezsra
Posts: 5
Joined: Fri Aug 27, 2010 5:53 pm

CoreFTP implicit FTPS errors when SSLv3 disabled on server

Post by ezsra »

We disabled SSLv3 in our Implicit FTPS server configuration a couple days ago. Since doing so, Core-FTP users have been unable to connect to our FTPS server. Filezilla works just fine.

Core-FTP Error:

Connect socket #928 to 192.168.101.10, port 990...
SSL/TLS error - 0, SSL error - 5, error:00000005:lib(0):func(0):DH lib
SSL Connection not established

sslscan of the server shows the following ciphers are accepted:
Accepted TLSv1 256 bits DHE-RSA-AES256-SHA
Accepted TLSv1 256 bits AES256-SHA
Accepted TLSv1 128 bits DHE-RSA-AES128-SHA
Accepted TLSv1 128 bits AES128-SHA
Accepted TLSv1 168 bits EDH-RSA-DES-CBC3-SHA
Accepted TLSv1 168 bits DES-CBC3-SHA
Accepted TLSv1 128 bits RC4-SHA
Accepted TLSv1 128 bits RC4-MD5


CoreFTP (Implicit FTPS) - Configured the client connection as follows:

Site Name:FTPS
Host: ftps.somewhere.com
Username: username
Password: Password
Port: 990
Connection: FTPS (SSL DIRECT)
SSL Options
SSL Listings: Checked
SSL Transfer: Checked
Clear (CCC): Not Checked
OpenSSL: Checked
Windows SSL: Not Checked
ForumAdmin
Site Admin
Posts: 1004
Joined: Mon Mar 24, 2003 4:37 am

Post by ForumAdmin »

Try the "Windows SSL" option
ezsra
Posts: 5
Joined: Fri Aug 27, 2010 5:53 pm

Windows SSLv3 does not work

Post by ezsra »

The results below are the same with SSLv3 enabled on the server and when SSLv3 is disabled.


Windows SSL results.

Connect socket #2064 to 172.31.34.54, port 55029...
TLSv1 (AES-128/SHA), 128 bits
150 Opening ASCII mode data connection for file list
[b]Server unexpectedly disconnected. [/b] <------------------ ERROR
226 Transfer complete
Transferred 0 bytes in 0.641 seconds


Nothing in the logs that I can see.
ForumAdmin
Site Admin
Posts: 1004
Joined: Mon Mar 24, 2003 4:37 am

Post by ForumAdmin »

Other options to check:

Site profile -> Advanced -> SSL/TLS -> allow session reuse.

Site profile -> "SSL Listings" unchecked.

Site profile -> Connection -> AUTH TLS


If possible, indicate the server being used so it can be tested here.
Post Reply