I tried to setup Proftpd 1.2.5rc1 with the TLS patch from ftp://ftp.runestig.com/pub/proftpd-tls/ on my Debian Woody box. Compiling went fine, but when I try to connect to this server using IglooFTP with SSL enabled, I only get this from IglooFTP:
 
-----------------
220 FTP Server ready.

AUTH SSL

234 AUTH SSL successful

Starting SSL/TLS negotiation ...

SSL Error: The server could be requesting a certificate.

Unable to establish secure connection.

-------------------

 

When checking the logfiles for Proftpd, I find this:

-------------------

xxxxxxxxxx.com (10.101.20.150[10.101.20.150]) - FTP session opened.
xxxxxxxxxx.com (10.101.20.150[10.101.20.150]) - SSL_accept(): (1) error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
xxxxxxxxxx.com (10.101.20.150[10.101.20.150]) - Failed TLS negotiation on control channel, disconnected.
---------------------

I created the certificates on the server using the following commands:

--------------------

openssl req -new -x509 -days 365 -nodes -out ftpd-rsa.pem -keyout ftpd-rsa-key.pem
openssl dsaparam -out dsap-tmp 1024
openssl req -newkey dsa:dsap-tmp -x509 -days 365 -nodes -out ftpd-dsa.pem -keyout ftpd-dsa-key.pem
openssl dhparam -out ftpd-dhparam.pem 1024
--------------------

I have the Debian package openssl 0.9.6c-2 installed. What am I missing here? Thanks in advance.

Reply via email to