Page 1 of 2

FTP to Filezilla server cannot connect implicit or explicit

Posted: 20 Mar 2022, 13:19
by nukiebe
When I try to connect with a Filezilla FTP server with explicit login I will get this error in Cobian:

Testing your ftp settings...

Licence expiry date: 31/12/9999
Set LocalDirectory to C:\WINDOWS\system32
Licence expiry date: 31/12/9999
waitOnShutdownSSL=True
SetActivePortRange(1024,64000). NextPort=9741
StrictReturnCodes=False
Setting socket timeout=120000
SecureSocket timeout=120000
SecureSocket timeout=120000
Command encoding=System.Text.SBCSCodePageEncoding
Setting socket buffer sizes=-1
220-FileZilla Server 1.3.0
220 Please visit https://filezilla-project.org/
SetSSLProtocol: min=TLS12, max=TLS12
---> AUTH TLS
234 Using authentication type TLS.
Starting handshake
ECDHE_RSA_AES_128_SHA
ECDHE_RSA_AES_256_SHA
RSA_AES_128_GCM_SHA256
RSA_AES_256_GCM_SHA384
DHE_RSA_AES_128_GCM_SHA256
DHE_RSA_AES_256_GCM_SHA384
ECDHE_RSA_AES_128_GCM_SHA256
ECDHE_RSA_AES_256_GCM_SHA384
DHE_RSA_AES_128_SHA
DHE_RSA_AES_128_SHA256
DHE_RSA_AES_256_SHA
DHE_RSA_AES_256_SHA256
DHE_RSA_AES_256_SHA256
RSA_AES_128_SHA
RSA_AES_128_SHA256
RSA_AES_256_SHA256
RSA_AES_256_SHA
ECDHE_RSA_3DES_SHA
DHE_RSA_3DES_SHA
RSA_3DES_168_SHA
DHE_RSA_DES_SHA
Handshake started
Waiting for handshake completion
OnReceive closing (size == 0)
CloseConnection(e=null)
Shut down socket
Closed socket
Close() called when open
OnReceive - caught exception - closing: Socket closed before handshake is complete (2)
CloseConnection(e=Socket closed before handshake is complete (2))
OnHandshakeComplete - waiting for lock
OnHandshakeComplete - in lock
OnHandshakeComplete - exiting lock
OnHandshakeComplete - exit
Exception during handshake
Socket closed before handshake is complete (2)

When I look in de Filezilla server log, I will find this:

2022-03-20T12:11:12.955Z II [FTP Session 1 xx.xxx.xxx.xxx] Session 0x1820f6d6c0 with ID 1 created.
2022-03-20T12:11:13.144Z >> [FTP Session 1 xx.xxx.xxx.xxx] AUTH TLS
2022-03-20T12:11:13.144Z << [FTP Session 1 xx.xxx.xxx.xxx] 234 Using authentication type TLS.
2022-03-20T12:11:13.144Z VV [FTP Session 1 xx.xxx.xxx.xxx] tls_layer_impl::server_handshake()
2022-03-20T12:11:13.144Z VV [FTP Session 1 xx.xxx.xxx.xxx] tls_layer_impl::continue_handshake()
2022-03-20T12:11:13.144Z VV [FTP Session 1 xx.xxx.xxx.xxx] tls_layer_impl::continue_handshake()
2022-03-20T12:11:13.441Z VV [FTP Session 1 xx.xxx.xxx.xxx] tls_layer_impl::continue_handshake()
2022-03-20T12:11:13.441Z !! [FTP Session 1 xx.xxx.xxx.xxx] GnuTLS error -87: No supported cipher suites have been found.
2022-03-20T12:11:13.441Z !! [FTP Session 1 xx.xxx.xxx.xxx] Control channel closed with error from source 0. Reason: ECONNABORTED - Connection aborted.
2022-03-20T12:11:13.441Z !! [FTP Server] Session 1 ended with error from source 0. Reason: ECONNABORTED - Connection aborted.
2022-03-20T12:11:13.441Z II [FTP Session 1 xx.xxx.xxx.xxx] Session 0x1820f6d6c0 with ID 1 destroyed.

What is wrong?
When I connect "unsecured", It will work without problems.

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 20 Mar 2022, 22:26
by cobian
Try forcing TLS21 as min SSL version. A wild guess...

If Filezilla running on Windows?

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 20 Mar 2022, 22:54
by nukiebe
I have tried almost all combinations of min and max SSL versions, but without result.
The Filezilla server runs on Windows. Its version is 1.3.0 (latest).
With another Filezilla server on Windows - but version 1.1.0 - Cobian doesn't have the problem.
But Filezilla Client does connect with the Filezilla server 1.3.0 (and 1.1.0) without problems.

So the problem seems to be related to the combination Filezilla server 1.3.0 and Cobian.

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 08 Jun 2022, 09:51
by stoeffu
I have exactly the same issue with Filezilla Server 1.4.1. Is there a Solution for this one?

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 09 Jun 2022, 15:15
by cobian
Filezilla is using a kind of certifivate (by default, but it can be changed at the server) that is not yet supported by the libraries I'm using at the moment.

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 08 Sep 2022, 11:01
by nukiebe
Hi,
Is there already any improvement on this item?
Are the libraries you are using already updated?

Cobian is a very good choice for me, but unusable for the moment because many FTP sites use Filezilla >v1.1.
I need to FTP to a dozen of FTP sites of clients of us. I cannot ask them to change their certificate.

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 10 Sep 2022, 03:12
by cobian
And you cannot use sftp instead?

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 20 Sep 2022, 10:18
by nukiebe
No, unfortunately not. Not all of our customers use sftp. Most of them use Filezilla, but the free version. sftp is only available on the paid version.

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 20 Sep 2022, 12:39
by cobian
:OK

Re: FTP to Filezilla server cannot connect implicit or explicit

Posted: 22 Jan 2023, 21:39
by likedi
Hi, long time Cobian user, few times supporter here :)

I have the same issue as OP.

Has anyone tried a different certificate, like Lets Encrypt option in FileZilla for example? Is the issue only with FileZilla self-generated certificate, or its how the certificate is used regardless of the certificate issuer?

Thanks!