FTP fails because of SSL certificate?

jimlongo

• March 19, 2018 13:38

I seem to be having difficulties connecting via FTP on port 21. The message depending on client usually runs along the lines of "SSL certificate failed to load or verify". I've tried connecting to the domain and the IP, always the same message.

• 

  cPanelMichael

  • March 20, 2018 19:20

  Hello, Do you notice any particular output to /var/log/messages when this happens? Thank you.

  0
• 

  jimlongo

  • March 20, 2018 20:04

  nothing noteable Mar 20 16:02:03 vps pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1 Mar 20 16:02:03 vps pure-ftpd: (?@127.0.0.1) [INFO] __cpanel__service__auth__ftpd__SGuRhZE1JOVLszz9pNzhK7BXGjggWeCEr3NQ7eLqIL1OpE2u09Taf24XLcZ1USPQ is now logged in Mar 20 16:02:03 vps pure-ftpd: (__cpanel__service__auth__ftpd__SGuRhZE1JOVLszz9pNzhK7BXGjggWeCEr3NQ7eLqIL1OpE2u09Taf24XLcZ1USPQ@127.0.0.1) [INFO] Logout.
  

  0
• 

  jimlongo

  • March 20, 2018 20:27

  Does auto SSL not provision a ftp.domain.com cert?

  0
• 

  cPanelMichael

  • March 21, 2018 17:16

  Hello, FTP does not support serving domain-specific certificates in response to TLS SNI requests.There's an open feature request for this functionality at:

  0
• 

  janipewter

  • June 14, 2018 22:31

  Is there any update on this? It would be great if cPanel supported TLS SNI for FTP connections. All of my clients get certificate warnings in Filezilla when connecting to FTP if they use their own domain, as the server presents only a certificate for the server's hostname.

  0
• 

  Jcats

  • June 14, 2018 23:02

  No: SNI support for FTP but in most cases the FTP client gives you the ability to click OK and logs you right in. The connection is still encrypted.

  0
• 

  cPanelMichael

  • June 15, 2018 15:50

  Hello @janipewter, As noted by @Jcats, there's no update to report at this time. That said, there's some recent discussion of this topic over on the feature request: SNI support for FTP I encourage you to vote and add your feedback to the feature request if you'd like to see it implemented. Thank you.

  0

Please sign in to leave a comment.