Re: [Proftpd-user] Problem with FTPES - Recent Clients

[TJ S. <tj...@ca...>]

> For what concerns the FTP connection, they always work fine.
> For what concerns the FTPES connection, we have a problem with connections 
> coming from “actual” FTP clients:
> 
> ·       old Filezilla (Version 3.0.9.3)  FTPES OK
> ·       actual  Filezilla (Version 3.2.7.1)  FTPES ERROR
> ·       actual SmartFTP (Professional) (Version 4.0.1072.0)  FTPES ERROR
> ·       actual CoreFTP (Version 2.1)  FTPES ERROR
> ·       actual PSFTP Professional (Version 1.8)  FTPES ERROR
> .......

How long has this been occurring?  What had changed when these explicit 
SSL/TLS issues appeared?  What version of OpenSSL are you using?

> CERTS CREATION:
> 
> openssl req -newkey rsa:1024 -x509 -nodes -out testhost.pem -keyout 
> testhost.key -days 365

You need to do more than this to create a signed certificate.  The above 
only creates a "certificate signing request" (CSR); it then has to be 
signed by a CA to be made into a real certificate.  See:

  http://www.modssl.org/docs/2.8/ssl_faq.html#ToC28

TJ

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   The optimist proclaims that we live in the best of all possible
   worlds; and the pessimist fears this is true.

   	-James Branch Campbell

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~