[lftp] Setting up FTPS connection question...

[Steven Dennis]

Hello,

I am trying to set up a server with vsftpd and use lftp to move files from
it.  I have been able to make a connection with lftp via SFTP (SSH File
Transfer Protocol) but would like to use FTPS as I think it will be
faster.  I have access to the server and the client but I think I have not
set up something correct.  I have posted a lot of the details here

http://ubuntuforums.org/showthread.php?t=2304605=newpost

When I try to connect I get this


pi@raspberrypi ~/Scratch/MT $ lftplftp :~> debug 5
lftp :~> open ftps://@XX.XX.XX.XX -p21201
Password:
 Resolving host address...
 1 address found: XX.XX.XX.XX
lftp @XX.XX.XX.XX:~> ls
 Connecting to XX.XX.XX.XX (XX.XX.XX.XX) port 21201
 gnutls_handshake: An unexpected TLS packet was received.
ls: Fatal error: gnutls_handshake: An unexpected TLS packet was received.

I have removed the IP and user name.

Can someone help me find what I am doing incorrectly?
___
lftp mailing list
lftp@uniyar.ac.ru
http://univ.uniyar.ac.ru/mailman/listinfo/lftp

Re: [lftp] Setting up FTPS connection question...

[Steven Dennis]

Thanks so much for the reply.  Would you know how to configure vsftpd to
use encryption from the very beginning?

On Tue, Dec 1, 2015 at 3:00 AM, Alexander V. Lukyanov  wrote:

> On Tue, Dec 01, 2015 at 02:46:16AM -0800, Steven Dennis wrote:
> > lftp :~> open ftps://@XX.XX.XX.XX -p21201
> >  gnutls_handshake: An unexpected TLS packet was received.
> > ls: Fatal error: gnutls_handshake: An unexpected TLS packet was received.
>
> ftps expects the connection to be encrypted from the very beginning. Most
> probably you have set up ftp server so that the connection is plain text.
> Use plain ftp:// and "set ftp:ssl-force yes" to make sure you are using
> encrypted connection.
>
> --
>Alexander.
>
___
lftp mailing list
lftp@uniyar.ac.ru
http://univ.uniyar.ac.ru/mailman/listinfo/lftp

Re: [lftp] Setting up FTPS connection question...

[Steven Dennis]

Thanks so much. Got a little further but ran into this.

pi@raspberrypi ~ $ lftp
lftp :~> set ftp:ssl-force yes
lftp :~> debug 5
lftp :~> open ftp://@XX.XX.XX.XX -p21201
Password:
 Resolving host address...
 1 address found: 37.48.65.81
lftp @XX.XX.XX.XX:~> ls
 Connecting to XX.XX.XX.XX (XX.XX.XX.XX) port 21201
<--- 500 OOPS: prctl PR_SET_SECCOMP failed
---> FEAT
Interrupt

On Tue, Dec 1, 2015 at 3:00 AM, Alexander V. Lukyanov  wrote:

> On Tue, Dec 01, 2015 at 02:46:16AM -0800, Steven Dennis wrote:
> > lftp :~> open ftps://@XX.XX.XX.XX -p21201
> >  gnutls_handshake: An unexpected TLS packet was received.
> > ls: Fatal error: gnutls_handshake: An unexpected TLS packet was received.
>
> ftps expects the connection to be encrypted from the very beginning. Most
> probably you have set up ftp server so that the connection is plain text.
> Use plain ftp:// and "set ftp:ssl-force yes" to make sure you are using
> encrypted connection.
>
> --
>Alexander.
>
___
lftp mailing list
lftp@uniyar.ac.ru
http://univ.uniyar.ac.ru/mailman/listinfo/lftp

Re: [lftp] Setting up FTPS connection question...

[Nate Sutton]

How much data are you moving where the slight speed difference between SFTP
and FTPS will matter? How confident that you can correctly set up FTPS?
Setting up SFTP securely is easy and I value security over performance when
it comes to private files. If you want to improve SFTP perf you can do a
few things. First, if you're transferring files that are already compressed
(video, images, gzipped files) then you should try turning off Compression
in the config. Second, use pget with multiple connections and you might
find it's fast enough. Lastly, if those don't help enough, there's always
http://www.psc.edu/index.php/hpn-ssh


On Tuesday, December 1, 2015, Steven Dennis  wrote:

> Thanks so much. Got a little further but ran into this.
>
> pi@raspberrypi ~ $ lftp
> lftp :~> set ftp:ssl-force yes
> lftp :~> debug 5
> lftp :~> open ftp://@XX.XX.XX.XX -p21201
> Password:
>  Resolving host address...
>  1 address found: 37.48.65.81
> lftp @XX.XX.XX.XX:~> ls
>  Connecting to XX.XX.XX.XX (XX.XX.XX.XX) port 21201
> <--- 500 OOPS: prctl PR_SET_SECCOMP failed
> ---> FEAT
> Interrupt
>
> On Tue, Dec 1, 2015 at 3:00 AM, Alexander V. Lukyanov 
> wrote:
>
>> On Tue, Dec 01, 2015 at 02:46:16AM -0800, Steven Dennis wrote:
>> > lftp :~> open ftps://@XX.XX.XX.XX -p21201
>> >  gnutls_handshake: An unexpected TLS packet was received.
>> > ls: Fatal error: gnutls_handshake: An unexpected TLS packet was
>> received.
>>
>> ftps expects the connection to be encrypted from the very beginning. Most
>> probably you have set up ftp server so that the connection is plain text.
>> Use plain ftp:// and "set ftp:ssl-force yes" to make sure you are using
>> encrypted connection.
>>
>> --
>>Alexander.
>>
>
>
___
lftp mailing list
lftp@uniyar.ac.ru
http://univ.uniyar.ac.ru/mailman/listinfo/lftp