Pureftpd over tls fails

Discussion in 'Server Operation' started by bjarne-j, Jan 10, 2016.

  1. bjarne-j

    bjarne-j New Member

    Hi all
    I'm having a problem connecting to my server (ispconfig3 w/pureftpd on debian jessie) via ftp with tls enabled.
    I've followed the guide to pureftpd with tls from "the perfect server". The server was running wheezy and I upgraded to jessie. Everything seems to be working except ftp via tls. Plain ftp works also.
    I'm using filezilla with protocol ftp and encryption: explicit ftp over TLS.
    Log from filezilla:
    Code:
    Response:    220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
    Response:    220-You are user number 1 of 50 allowed.
    Response:    220-Local time is now 13:17. Server port: 21.
    Response:    220-This is a private system - No anonymous login
    Response:    220-IPv6 connections are also welcome on this server.
    Response:    220 You will be disconnected after 15 minutes of inactivity.
    Command:    AUTH TLS
    Response:    234 AUTH TLS OK.
    Status:    Initializing TLS...
    Error:    Connection timed out after 20 seconds of inactivity
    Error:    Could not connect to server
    Log from syslog:
    Code:
    Jan 10 13:17:31 pure-ftpd: (?@x.x.x.x) [INFO] New connection from x.x.x.x
    Jan 10 13:17:31 pure-ftpd: (?@x.x.x.x) [DEBUG] Command [auth] [TLS]
    Jan 10 13:17:51 pure-ftpd: (?@x.x.x.x) [WARNING] Sorry, cleartext sessions are not accepted on this server.#012Please reconnect using
    SSL/TLS security mechanisms.
    Jan 10 13:17:57 pure-ftpd: (?@x.x.x.x)
    
    Hope someone can give me som hints. Thanks in advance
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Did you run a ispconfig update with "reconfigure services => yes" after the wheezy to jessie update?
     
  3. bjarne-j

    bjarne-j New Member

    I ran the update.php script with reconfigure services yes.
     
  4. bjarne-j

    bjarne-j New Member

    Can I un-install pureftpd and remove all settings - then try to install again. Without breaking something in ispconfig 3? Can't find any good reason tls should not work - but it doesn't :(
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes, you can do that. But you should run a ispconfig update with "reconfigure services = yes" afterward.
     
  6. bjarne-j

    bjarne-j New Member

    Thanks for your help till. Up and running again.
     

Share This Page