You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Søren Juul (JIRA)" <ji...@apache.org> on 2012/08/02 10:29:02 UTC
[jira] [Created] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Søren Juul created FTPSERVER-433:
------------------------------------
Summary: Issues with data transfer for explicit SSL connections
Key: FTPSERVER-433
URL: https://issues.apache.org/jira/browse/FTPSERVER-433
Project: FtpServer
Issue Type: Bug
Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
Reporter: Søren Juul
When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
Server log: http://pastebin.com/VBbvux2G
FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [jira] [Commented] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by Sai Pullabhotla <sa...@jmethods.com>.
Based on the file name you are uploading, I'm assuming it is 150 MB. If you
have not done already, can you upload a small file and let us know the
result?
It appears that it might be something to do with the TLS_CLOSE_NOTIFY
signal/message. Looks like the client (FileZilla) is negotiating for a TLS
connection but closing the socket without sending the CLOSE_NOTIFY? Any
SSL/TLS experts over there to validate/add more to this?
Thanks.
On Fri, Aug 3, 2012 at 2:47 AM, Søren Juul (JIRA) <ji...@apache.org> wrote:
>
> [
> https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13427888#comment-13427888]
>
> Søren Juul commented on FTPSERVER-433:
> --------------------------------------
>
> Thanks for your reply.
>
> Which problems do you expect to arise regarding ports? The only problem I
> can think of is access right to lover port numbers, and server is run as
> super user, so this is not the problem. Furthermore I have no problem
> downloading files over FTPS, its only the upload part that gives problems.
> If I connect to the same configuration with regular FTP (no SSL) I can
> upload just fine.
>
> Yes the logs posted is from a localhost to localhost, so there should not
> be any firewalls interfering and I have not set up any iptable rules. I
> have also tested on remote hosts, which yielded the same result. However,
> if I use apache FTPSClient I am able to do SSL transfers just fine.
>
> I have rerun the test with -Djavax.net.debug=all, the results are here:
> ftpd.log: http://pastebin.com/LAQR2hN4
> stdout and stderr: is in the attached file as it was to large to upload to
> pastebin. During each reconnect a _lot_ of data is printed.
> FileZilla: http://pastebin.com/PMSLcBZY
>
> > Issues with data transfer for explicit SSL connections
> > ------------------------------------------------------
> >
> > Key: FTPSERVER-433
> > URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> > Project: FtpServer
> > Issue Type: Bug
> > Environment: Linux, java version "1.6.0_30",
> apache-ftpserver-1.0.5
> > Reporter: Søren Juul
> >
> > When using the sample configuration with SSL in explicit mode, some
> clients (e.g. FileZilla) have problems transferring. There is not problems
> browsing data, but when uploading the transfers cuts out regularly, and the
> transfer connections must be restarted. Bellow is sample output from the
> server log and FileZilla log.
> > Server log: http://pastebin.com/VBbvux2G
> > FileZilla log: http://pastebin.com/NP6Yh44s
>
> --
> This message is automatically generated by JIRA.
> If you think it was sent incorrectly, please contact your JIRA
> administrators:
> https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
> For more information on JIRA, see: http://www.atlassian.com/software/jira
>
>
>
[jira] [Updated] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by "Søren Juul (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Søren Juul updated FTPSERVER-433:
---------------------------------
Attachment: output.txt.gz
> Issues with data transfer for explicit SSL connections
> ------------------------------------------------------
>
> Key: FTPSERVER-433
> URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> Project: FtpServer
> Issue Type: Bug
> Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
> Reporter: Søren Juul
> Attachments: output.txt.gz
>
>
> When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
> Server log: http://pastebin.com/VBbvux2G
> FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by "Niklas Gustavsson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13427657#comment-13427657 ]
Niklas Gustavsson commented on FTPSERVER-433:
---------------------------------------------
It's hard to tell from the provided logs, but I would guess this is a network problem on the ports used for the data connection. Given you connect to localhost, I'm guessing that would exclude firewalls. You could run with SSL debugging enabled on the server, but I'm not sure that will tell you much more:
-Djavax.net.debug=all
http://docs.oracle.com/javase/1.5.0/docs/guide/security/jsse/ReadDebug.html
> Issues with data transfer for explicit SSL connections
> ------------------------------------------------------
>
> Key: FTPSERVER-433
> URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> Project: FtpServer
> Issue Type: Bug
> Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
> Reporter: Søren Juul
>
> When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
> Server log: http://pastebin.com/VBbvux2G
> FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by "Søren Juul (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13427888#comment-13427888 ]
Søren Juul commented on FTPSERVER-433:
--------------------------------------
Thanks for your reply.
Which problems do you expect to arise regarding ports? The only problem I can think of is access right to lover port numbers, and server is run as super user, so this is not the problem. Furthermore I have no problem downloading files over FTPS, its only the upload part that gives problems. If I connect to the same configuration with regular FTP (no SSL) I can upload just fine.
Yes the logs posted is from a localhost to localhost, so there should not be any firewalls interfering and I have not set up any iptable rules. I have also tested on remote hosts, which yielded the same result. However, if I use apache FTPSClient I am able to do SSL transfers just fine.
I have rerun the test with -Djavax.net.debug=all, the results are here:
ftpd.log: http://pastebin.com/LAQR2hN4
stdout and stderr: is in the attached file as it was to large to upload to pastebin. During each reconnect a _lot_ of data is printed.
FileZilla: http://pastebin.com/PMSLcBZY
> Issues with data transfer for explicit SSL connections
> ------------------------------------------------------
>
> Key: FTPSERVER-433
> URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> Project: FtpServer
> Issue Type: Bug
> Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
> Reporter: Søren Juul
>
> When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
> Server log: http://pastebin.com/VBbvux2G
> FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by "David Latorre (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13477730#comment-13477730 ]
David Latorre commented on FTPSERVER-433:
-----------------------------------------
I would suspect some bug in FileZilla. For instance, there is a bug in WinSCP (or the library it uses for SSL ) where , depending on the file size, the TLS_CLOSE_NOTIFY message is ill-formed. Java is a bit pick about this, and will throw an Exception in this case.
What version of Filezilla are you using? Can you reproduce this problem with every version? Does this problem arise only for some file contents? (Write a text file of the same length as this one and with a character repeting itself as many times as necessary "111111111111111111111111..." and check again ).
> Issues with data transfer for explicit SSL connections
> ------------------------------------------------------
>
> Key: FTPSERVER-433
> URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> Project: FtpServer
> Issue Type: Bug
> Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
> Reporter: Søren Juul
> Attachments: output.txt.gz
>
>
> When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
> Server log: http://pastebin.com/VBbvux2G
> FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (FTPSERVER-433) Issues with data transfer for
explicit SSL connections
Posted by "Søren Juul (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FTPSERVER-433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13477755#comment-13477755 ]
Søren Juul commented on FTPSERVER-433:
--------------------------------------
You are right, the problem actually seems to be related to filezilla using GnuTLS versions greater than 2.10.
> Issues with data transfer for explicit SSL connections
> ------------------------------------------------------
>
> Key: FTPSERVER-433
> URL: https://issues.apache.org/jira/browse/FTPSERVER-433
> Project: FtpServer
> Issue Type: Bug
> Environment: Linux, java version "1.6.0_30", apache-ftpserver-1.0.5
> Reporter: Søren Juul
> Attachments: output.txt.gz
>
>
> When using the sample configuration with SSL in explicit mode, some clients (e.g. FileZilla) have problems transferring. There is not problems browsing data, but when uploading the transfers cuts out regularly, and the transfer connections must be restarted. Bellow is sample output from the server log and FileZilla log.
> Server log: http://pastebin.com/VBbvux2G
> FileZilla log: http://pastebin.com/NP6Yh44s
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira