[Cyberduck-trac] [Cyberduck] #9674: Client certificate prompt keeps showing up

[Cyberduck]

#9674: Client certificate prompt keeps showing up
-----------------------------------------+----------------------
 Reporter:  c_scheurle                   |         Owner:  yla
     Type:  defect                       |        Status:  new
 Priority:  normal                       |     Milestone:  5.2
Component:  ftp-tls                      |       Version:  5.1
 Severity:  normal                       |    Resolution:
 Keywords:  ftps, ftp, TLS, certificate  |  Architecture:  Intel
 Platform:  Mac OS X 10.11               |
-----------------------------------------+----------------------

Comment (by dkocher):

 {{{
 osaka:~ dkocher$ /usr/local/Cellar/openssl/1.0.2h_1/bin/openssl  s_client
 -starttls ftp -connect 178.254.6.69:21
 CONNECTED(00000003)
 depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN =
 www.scheurle.info
 verify error:num=20:unable to get local issuer certificate
 verify return:1
 depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN =
 www.scheurle.info
 verify error:num=21:unable to verify the first certificate
 verify return:1
 ---
 Certificate chain
  0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=www.scheurle.info
    i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO
 RSA Domain Validation Secure Server CA
 ---
 Server certificate
 -----BEGIN CERTIFICATE-----
 MIIFTzCCBDegAwIBAgIQUOU5fY9KMo0UbbkCRqJkMDANBgkqhkiG9w0BAQsFADCB
 kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
 A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
 BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
 QTAeFw0xNTA5MDEwMDAwMDBaFw0xNjEwMTAyMzU5NTlaMFUxITAfBgNVBAsTGERv
 bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxGjAY
 BgNVBAMTEXd3dy5zY2hldXJsZS5pbmZvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
 MIIBCgKCAQEAqFzYPQDMaJpr6VZadrEjaIn8iqJy4LxA3RhnfIVh3DMTivZGl1kq
 NhRd/YcdBg8IZYvNfVqKWVQ8LfXAY917FTQRg56jS+yxifJ7qRKMEIAYcp1S9hfT
 OlebxEWLc2ZV2iELG3R1okwX9+S3Wc1rJJO3RAN+jdza+CQfSwuxsmU5IVwBuDPW
 VNIy8ANTCIUDhwLJly6Q4ms1tDpwIFsm39/xC/E92ZiUwaK12G8KiW3Xh96plmSB
 nc3rYIioRpjPEmVpaDRnqZM8WDW4LrP+5q9DzXmB8RiGnRf0cgZ+2MRsqkVNyzNR
 OwXMQKnifpaweWnoNV3jaK8apQp7QZegVwIDAQABo4IB3TCCAdkwHwYDVR0jBBgw
 FoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFK5i8l8lm7enbmDsB/dK
 lSEAS8aTMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG
 CCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCsw
 KQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeB
 DAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9D
 T01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggr
 BgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29t
 L0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYI
 KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTArBgNVHREEJDAighF3
 d3cuc2NoZXVybGUuaW5mb4INc2NoZXVybGUuaW5mbzANBgkqhkiG9w0BAQsFAAOC
 AQEAWeqqlc1mOsvcdEfFZjbFXravzLNh8p82dpc0r9dDnMmbmeaUtls+ko9laqS9
 cbA2YMjgkTNEjtVIHfm7AgONHiZuj0C2jzlBP6xI4Rc4HTFw0+Vz5ey137JtlUWm
 6n3YoUm26077GO/QVh4OLwEVe4aCDG+qhVfVg5GcRbuu11AOUfjlASpCkpSdlU49
 vyFt4TKSM5BV9w3o7qL6PnsFuSIf/HNF+OSXJmP6dyS2D5l3udO8wu/5tg/ty3LG
 zpNgHnNTRTPCTOpqy7d/pp/hhOvpFH28f+9STvtUjKQPtfxahS/PCRZtdMjX9fOx
 XOv1a6FsKW6PPOaO6gmmEvjJPA==
 -----END CERTIFICATE-----
 subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=www.scheurle.info
 issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO
 RSA Domain Validation Secure Server CA
 ---
 No client certificate CA names sent
 Client Certificate Types: RSA fixed DH, DSS fixed DH, RSA sign, DSA sign,
 ECDSA sign
 Server Temp Key: DH, 1024 bits
 ---
 SSL handshake has read 2139 bytes and written 528 bytes
 ---
 New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
 Server public key is 2048 bit
 Secure Renegotiation IS supported
 Compression: zlib compression
 Expansion: zlib compression
 No ALPN negotiated
 SSL-Session:
     Protocol  : TLSv1
     Cipher    : DHE-RSA-AES256-SHA
     Session-ID:
 89312068D145B98832FB81BB21D1C789D2A6DE64C3692999E3AD718FF898E8DF
     Session-ID-ctx:
     Master-Key:
 24C4AF644087391AA29F94A486F2B8CB9EAC90ED43C8FD730FFCC79D26A810DDC747F2EDA0FF1658DE7BFB2734A97B02
     Key-Arg   : None
     PSK identity: None
     PSK identity hint: None
     SRP username: None
     Compression: 1 (zlib compression)
     Start Time: 1473238237
     Timeout   : 300 (sec)
     Verify return code: 21 (unable to verify the first certificate)
 ---
 220 178.254.6.69 FTP server ready

 }}}

--
Ticket URL: <https://trac.cyberduck.io/ticket/9674#comment:7>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows