Re: [lftp] Make certificate verification great again

2017-03-18 Thread Nathanaël Naeri
Thank you for your answer. I have updated my version of GnuTLS to 3.5.10 and compiled lftp 4.7.7 against it. The resulting "./lftp --version" shows "Libraries used: Readline 6.3, Expat 2.1.0, GnuTLS 3.5.10, zlib 1.2.8". Yet the error I reported in my first message remains: "Certificate

Re: [lftp] Make certificate verification great again

2017-03-20 Thread Nathanaël Naeri
on the HTTP host? This would explain why verification fails for the first one but succeeds for the second one. I'm going to contact the hosting company's sysadmins, thanks. On Mon, Mar 20, 2017 at 11:49 PM, Daniel Fazekas <fds...@gmail.com> wrote: > On Mar 20, 2017, at 14:55, Nathanaë

Re: [lftp] Make certificate verification great again

2017-03-20 Thread Nathanaël Naeri
nd apply both to *.seedbox.fr. Is that an issue that this hosting company could do something about? I can ask their sysadmins for help. On Mon, Mar 20, 2017 at 12:52 PM, Alexander V. Lukyanov <l...@netis.ru> wrote: > On Sat, Mar 18, 2017 at 09:13:27PM +0100, Nathanaël Naeri wrote: >> Thank you fo

Re: [lftp] Make certificate verification great again

2017-04-03 Thread Nathanaël Naeri
verification succeeds. Thanks again for your help with this issue! Naël On Wed, Mar 22, 2017 at 1:03 AM, Nathanaël Naeri <nathanael.na...@gmail.com> wrote: > I've contacted the hosting company. Thank you so much for > troubleshooting this issue, and helping me understand certificate &g

[lftp] Make certificate verification great again

2017-03-11 Thread Nathanaël Naeri
I'm trying to connect to a FTP server that supports explicit FTPS using TLS, but I can't get certificate verification working. Most of the online help I find advises disabling certificate verification with "ssl:verify-certificate no", and I assume this is not good advice. My current understanding

Re: [lftp] Make certificate verification great again

2017-03-12 Thread Nathanaël Naeri
nderstanding of CA is correct. The Comodo certificate should be > present in the CA bundle for the verification to succeed. > > > вс, 12 марта 2017, 5:16 Nathanaël Naeri <nathanael.na...@gmail.com>: >> >> I'm trying to connect to a FTP server that supports explicit FTPS

Re: [lftp] Make certificate verification great again

2017-03-12 Thread Nathanaël Naeri
nce for your help Naël On Sun, Mar 12, 2017 at 4:33 PM, Nathanaël Naeri <nathanael.na...@gmail.com> wrote: > Thanks for your answer. I have checked that Comodo's root CA > certificate is present in the certificate bundle file, however > Comodo's intermediate CA certificate (that s