Hello,

Im trying to connect to a server and getting this error:
Fatal error: SSL connect: error:0D0680A8:asn1 encoding
routines:ASN1_CHECK_TLEN:wrong tag

Im on a RHEL4 64-bit server with the latest RHEL lftp package installed
(lftp-3.0.6-4.el4).

Here is the output I get when i try connecting:

[u...@server]$ lftp
lftp :~> debug 13
lftp :~> set ftp:ssl-force true
lftp :~> set ssl:verify-certificate off
lftp :~> set cmd:verbose yes
lftp :~> open ftps.xxxx.se
notice: cannot open /home/xxxx/.netrc: No such file or directory
---- Resolving host address...
---- 1 address found
lftp ftps.xxxx.se:~> user USERNAME PASS
notice: cannot open /home/xxxx/.netrc: No such file or directory
lftp [email protected]:~> ls
dns cache hit
---- Connecting to ftps.xxxx.se (192.xxx.xxx.xxx) port 21
<--- 220-FTP 10:09:40 on 2009-02-13.
<--- 220 Connection will close if idle for more than 30 minutes.
---> FEAT
<--- 211- Extensions supported
<---  SIZE
<---  MDTM
<---  AUTH TLS
<---  PBSZ
<---  PROT
<--- 211 End
---> AUTH TLS
<--- 234 Security environment established - ready for negotiation
---> USER USERNAME
**** SSL connect: error:0D0680A8:asn1 encoding
routines:ASN1_CHECK_TLEN:wrong tag
---- Closing control socket
ls: Fatal error: SSL connect: error:0D0680A8:asn1 encoding
routines:ASN1_CHECK_TLEN:wrong tag

I tried using curl but gets the same error and according to curl mailinglist
it could have something to do with the version of OpenSSL installed.
Red Hat doesnt have any support for openssl than 0.9.7a on RHEL4.

I have talked to the company running the ftps server and they see something
about "Certificate is not valid" on their side. I thought the option "set
ssl:verify-certificate off" should fix this but it didnt.

Does anyone have any clue on how I should continue? It is important that we
dont loose the support from Red Hat by eg compiling in never libraries and
so.

-- 
Mvh
Jocke
Sent from: Bromma Ab Sweden.

Reply via email to