Beefy Boxes and Bandwidth Generously Provided by pair Networks
Think about Loose Coupling

Re: Net::FTPSSL + TLS Handshake Fail

by Illuminatus (Curate)
on Sep 28, 2012 at 18:39 UTC ( #996269=note: print w/replies, xml ) Need Help??

in reply to [Solved] Net::FTPSSL + TLS Handshake Fail

caveat: I've done almost no work with TLS...

I did find your post a little confusing, since you're using 'server' to refer to both the client systems and the system they are connecting to. I'm still not sure which one the ubuntu system is. I'd have used 'MachineA' and 'MachineB' and talk about them as the clients. ok, enough with the nits...

It's failing on the initial TLS negotiation. As it's obviously getting to the server, it's not a network or firewall issue. That leaves either certificates or TLS library version mismatch as the most likely possible culprits. If you're able to login to ServerB (as the user the task is running under), I'd try a local ftps client there to see if it can login to your ftps-server. If you're able to make changes on the ftps-server, try bumping up the debug level on the server app. Most servers have a diagnostic level that provides detailed info on every failed session. It will likely be more informative.


Replies are listed 'Best First'.
Re^2: Net::FTPSSL + TLS Handshake Fail
by Pizentios (Scribe) on Sep 28, 2012 at 18:48 UTC
    Yes you are correct about my post being confusing...You are correct that ServerA and ServerB are both clients trying to connect to the ftps server. I refered to them wrongly as servers in this instant.

    I will give a actual ftps client a try quickly and report back with my results.

    Thanks very much for your input.
      after further testing with WinSCP on the client i am pretty sure that it's a Net::FTPSSL issue, as i can get the WinSCP client to conenct properly.

      After testing with WinSCP i uninstalled the perl install (strawberry perl) and re-installed. I now get the following output in my log:

      Net-FTPSSL Version: 0.22

      Perl: 5.016001 5.16.1, OS: MSWin32

      Server (port): (21)

      Keys: (Debug), (Encryption), (Port)
      Values: (1), (I), (21)

      Cannot connect to SSL connect attempt failed with unknown error error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number at line 63.

      Some more google searching regarding this new error message hasn't brought me much in the way of a solution....

      Does anybody have any ideas on how to fix this? I am at a loss for why this keeps failing, even though on other clients this script works just fine (including another windows 2008 r2 machine).
        After much testing, it's looking like it's a firewall upstream from the machine that is running the script causing the issues.

        Marking original topic solved.

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://996269]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others cooling their heels in the Monastery: (5)
As of 2020-10-01 16:44 GMT
Find Nodes?
    Voting Booth?
    My favourite web site is:

    Results (16 votes). Check out past polls.