GnuTLS error -12: A TLS fatal alert has been received
Last week I was trying to connect to my FTP server after I rebooted the server machine and after a lot of time I didn't connect to it.
Normally, I use Filezilla FTP client to connect to FTP servers, and I'm running the version 3.5.3 under Windows.
On my own server I run VSFTPD under Linux and I've enabled FTPES (Explicit TLS/SSL) connections. All the times I connected before it connected without problems and after the connection was established I was only prompted for accepting my self-signed SSL X.509 certificate (if it was not saved into Filezilla certificates cache).
That day it disconnected and the bad error I received was:
GnuTLS error -12: A TLS fatal alert has been receivedI googled a little about it and I didn't find anything useful. So I started thinking things such as VSFTPD was damaged, so I tried to reinstall it, but without any changes. Then I thought it could depend on the certificate that was expired, so I generated a new SSL certificate, but that wasn't the solution again...
Finally, I tried to check my VSFTPD configuration, without noticing any errors. I really didn't know where to start again...
So I gave up for that day and I tried again the following day: I used another computer, where I had Filezilla 3.5.2. I tried connecting again, to copy the error again and googleing again to find a solution.
But this time it worked like a charm... so I tried to upgrade my Filezilla client and the error was again there: my efforts started to lead to some result! I finally found in the official Filezilla documentation that it was an error due to a different cipher suite supported by the new version of Filezilla that doesn't match the one used by VSFTPD. So, the easy solution was to add the
Code:
ssl_ciphers=HIGH
directive to the vsftpd.conf file, saving it and restarting the vsftpd daemon:
Code:
$ sudo restart vsftpd
Now I can happily connect again to my FTP server with FTPES connections using my updated Filezilla client version! 
0 comments
No comments available: add yours!
Login or register to add a comment (registered users only)