Hi Alex:

 

  As I talked with you about lftp, it works with ftp mode. That is, it utilizes 
the default ports (20,21). However, my client persists in using lftp ftps mode, 
which utilizes ports (989,990).

 

  On the server, I add three lines as following as restart the vsftpd service:

 

## three directives are added in the /etc/vsftpd/vsftpd.conf on the server

## ftps for lftp added by glu 02/04/2007

connect_from_port_20=YES

listen_port=990

ftp_data_port=989

 

[EMAIL PROTECTED]:/etc/vsftpd$ service vsftpd restart

Shutting down vsftpd: [  OK  ]

Starting vsftpd for vsftpd: [  OK  ]

 

On the client, I'm failed when I try to connect to the server.

 

[EMAIL PROTECTED] scu]$ lftp ftps://blxch2 

lftp blxch2:~> debug 5

lftp blxch2:~> user sctest1

Mot de passe: 

lftp [EMAIL PROTECTED]:~> ls

---- Connexion à blxch2 (142.117.32.223) port 990

**** Erreur de socket (Connexion refusée) - reconnexion

---- Connexion à blxch2 (142.117.32.223) port 990

**** Erreur de socket (Connexion refusée) - reconnexion

 

What's wrong?

 

   Thanks in advance.

 

   Guanqing

 

 

-----Original Message-----
From: Alexander V. Lukyanov [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, April 03, 2007 12:20 AM
To: Lu, Guanqing (J3206)
Cc: Doucerain, Jerome (520031); [email protected]
Subject: Re: ERROR: Certificate verification: unable to get local issuer 
certificate

 

On Mon, Apr 02, 2007 at 11:32:47AM -0400, [EMAIL PROTECTED] wrote:

> Certificate depth: 0; subject: 
> /C=CA/ST=QUEBEC/L=MONTREAL/O=CONNEXIM/OU=Gestion 
> Serveurs/CN=blxch2.qc.bell.ca; issuer: 
> /C=CA/ST=QUEBEC/L=MONTREAL/O=CONNEXIM/OU=Gestion Serveurs/CN=Certification 
> Authority/[EMAIL PROTECTED]

> ERROR: Certificate verification: unable to get local issuer certificate

> ls: Erreur fatale: SSL connect: unable to get local issuer certificate

> 

> I put both 

> 

> set ssl:verify-certificate no

 

See if there is a more specific setting (like ssl:verify-certificate/blxch2) 
using:

 

      lftp> set -a|grep verify-certificate

 

-- 

   Alexander.

Reply via email to