We disabled SSLv3 in our Implicit FTPS server configuration a couple days ago. Since doing so, Core-FTP users have been unable to connect to our FTPS server. Filezilla works just fine.
Core-FTP Error:
Connect socket #928 to 192.168.101.10, port 990...
SSL/TLS error - 0, SSL error - 5, error:00000005:lib(0):func(0):DH lib
SSL Connection not established
sslscan of the server shows the following ciphers are accepted:
Accepted TLSv1 256 bits DHE-RSA-AES256-SHA
Accepted TLSv1 256 bits AES256-SHA
Accepted TLSv1 128 bits DHE-RSA-AES128-SHA
Accepted TLSv1 128 bits AES128-SHA
Accepted TLSv1 168 bits EDH-RSA-DES-CBC3-SHA
Accepted TLSv1 168 bits DES-CBC3-SHA
Accepted TLSv1 128 bits RC4-SHA
Accepted TLSv1 128 bits RC4-MD5
CoreFTP (Implicit FTPS) - Configured the client connection as follows:
Site Name:FTPS
Host: ftps.somewhere.com
Username: username
Password: Password
Port: 990
Connection: FTPS (SSL DIRECT)
SSL Options
SSL Listings: Checked
SSL Transfer: Checked
Clear (CCC): Not Checked
OpenSSL: Checked
Windows SSL: Not Checked
CoreFTP implicit FTPS errors when SSLv3 disabled on server
Windows SSLv3 does not work
The results below are the same with SSLv3 enabled on the server and when SSLv3 is disabled.
Windows SSL results.
Connect socket #2064 to 172.31.34.54, port 55029...
TLSv1 (AES-128/SHA), 128 bits
150 Opening ASCII mode data connection for file list
[b]Server unexpectedly disconnected. [/b] <------------------ ERROR
226 Transfer complete
Transferred 0 bytes in 0.641 seconds
Nothing in the logs that I can see.
Windows SSL results.
Connect socket #2064 to 172.31.34.54, port 55029...
TLSv1 (AES-128/SHA), 128 bits
150 Opening ASCII mode data connection for file list
[b]Server unexpectedly disconnected. [/b] <------------------ ERROR
226 Transfer complete
Transferred 0 bytes in 0.641 seconds
Nothing in the logs that I can see.
-
- Site Admin
- Posts: 1004
- Joined: Mon Mar 24, 2003 4:37 am