[Cyberduck-trac] [Cyberduck] #8703: Handshake failure. Unable to negotiate an acceptable set of security parameters.

Cyberduck trac at trac.cyberduck.io
Sun Mar 29 18:14:11 UTC 2015


#8703: Handshake failure. Unable to negotiate an acceptable set of security
parameters.
---------------------------+---------------------------
 Reporter:  c.sale         |         Owner:  dkocher
     Type:  defect         |        Status:  closed
 Priority:  normal         |     Milestone:  4.7
Component:  ftp-tls        |       Version:  4.6.5
 Severity:  normal         |    Resolution:  worksforme
 Keywords:                 |  Architecture:  Intel
 Platform:  Mac OS X 10.9  |
---------------------------+---------------------------

Comment (by c.sale):

 Thank your for prompt attention to the matter. The proposed solutions
 however seems unlikely to explain the problem as FileZilla is able to
 successfully establish TLSv1.2 connection with the server. Here is the
 relevant part of FileZilla's connection log:

 {{{
 Response:  234 AUTH TLS OK.
 Status:       Initializing TLS...
 Trace:        CTlsSocket::Handshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        CTlsSocket::ContinueHandshake()
 Trace:        TLS Handshake successful
 Trace:        Protocol: TLS1.2, Key exchange: RSA, Cipher: AES-256-GCM,
 MAC: AEAD
 Status:       Verifying certificate...
 Status:       TLS connection established.
 }}}

 In contrast, CyberDuck tells me

 {{{
 Response:  234 AUTH TLS OK.
 }}}

 and then aborts with the handshake failure error.

 In case this is relevant. The server runs Pure-FTPd and the hosting
 provider tells me that to connect to the server I need to use ftp client
 supporting TLSv1 or higher. They do not support SSLv2 for safety reasons.

-- 
Ticket URL: <https://trac.cyberduck.io/ticket/8703#comment:4>
Cyberduck <http://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list