Forum » Support and Bug Reports »

Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Username

Subject

Message body

Font colour:

Font size:

Options

Disable BBCode in this post

Notify me when a reply is posted (registered users only)

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

Filename

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

File Comment

Options

Private file (available to author and site moderators only)

Topic review

martin

Re: error in SSLv2/v3 read

2019-01-15

RaduMan wrote:

TLS connect: error in SSLv2/v3 read server hello A
Can't establish TLS connection
Disconnected from server
Connection failed.

In the version 5.13.7, downloaded today

Please start a new thread for your problem. Include a full session log file. And also a log file from any other FTPS client showing a successful connection.

RaduMan

Re: error in SSLv2/v3 read

2019-01-11 15:20

martin wrote:

cyberdem wrote:

I am getting the same error (error in SSLv2/v3 read). downloaded version 4.3.8.0

Where did you download 4.3.8 from? It's over 6 years old. Please download the latest version:
https://winscp.net/eng/download.php

TLS connect: error in SSLv2/v3 read server hello A
Can't establish TLS connection
Disconnected from server
Connection failed.

In the version 5.13.7, downloaded today

martin

Re: error in SSLv2/v3 read

2018-12-21

cyberdem wrote:

I am getting the same error (error in SSLv2/v3 read). downloaded version 4.3.8.0

Where did you download 4.3.8 from? It's over 6 years old. Please download the latest version:
https://winscp.net/eng/download.php

pathi

2018-12-18 16:15

Thank you Martin. Will start a new thread.

martin

Re: SSL3 alert write: fatal: bad record mac

2018-12-18

Pathi wrote:

We are getting thses errors continually. Kindly help me.

Please start a new thread for your problem and include a full session log file showing the problem (using the latest version of WinSCP).

To generate the session log file, enable logging, log in to your server and do the operation and only the operation that causes the error. Submit the log with your post as an attachment. Note that passwords and passphrases not stored in the log. You may want to remove other data you consider sensitive though, such as host names, IP addresses, account names or file names (unless they are relevant to the problem). If you do not want to post the log publicly, you can mark the attachment as private.

Pathi

SSL3 alert write: fatal: bad record mac

2018-12-14 14:48

Hi Martin,

We are getting thses errors continually. Kindly help me.

Thank you,
pathi
1.
TLS connection established. Waiting for welcome message...
Connection failed.
Using TLSv1.2, cipher TLSv1/SSLv3: ECDHE-RSA-AES256-SHA384, 2048 bit RSA, ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384

Disconnected from server
Connection failed.

2.
Using TLSv1.2, cipher TLSv1/SSLv3: ECDHE-RSA-AES256-SHA384, 2048 bit RSA, ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384

SSL3 alert write: fatal: bad record mac
decryption failed or bad record mac
Disconnected from server
Copying files to remote side failed.
(A)bort, (R)econnect (0 s): Reconnect

3.
Lost connection.
Using TLSv1.2, cipher TLSv1/SSLv3: ECDHE-RSA-AES256-SHA384, 2048 bit RSA, ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384

Disconnected from server
Copying files to remote side failed.
(A)bort, (R)econnect (0 s): Reconnect
Connecting to <IP_of_server> ...
TLS connection established. Waiting for welcome message...

cyberdem

2012-07-23 16:34

Thanks. It is working

martin

Re: error in SSLv2/v3 read

2012-07-23

cyberdem wrote:

I am getting the same error (error in SSLv2/v3 read). downloaded version 4.3.8.0

It is likely due to this bug:
https://winscp.net/tracker/879

cyberdem

error in SSLv2/v3 read

2012-07-19 20:01

I am getting the same error (error in SSLv2/v3 read). downloaded version 4.3.8.0

Any idea?

I appreciate your great help.

martin

2012-05-14

Please start a new topic and post logs files from from GUI and scripting.

rampike

2012-05-14 11:45

I have just tried 5.0.7 and get the same error. The graphical interface works fine, but /script function gives this error:

. 2012-05-14 12:38:44.843 Connecting to 10.0.0.51 ...
. 2012-05-14 12:38:44.843 Connected with 10.0.0.51, negotiating SSL connection...
. 2012-05-14 12:38:44.859 SSL_connect: error in SSLv2/v3 read server hello A
. 2012-05-14 12:38:44.859 Can't establish SSL connection
. 2012-05-14 12:38:44.859 Disconnected from server
. 2012-05-14 12:38:44.859 Connection failed.

martin

2012-05-14

rampike wrote:

I have the same problem - maybe it has something to do with certificates?

Have you tried 5.0.7 beta?

rampike

2012-05-11 09:37

I have the same problem - maybe it has something to do with certificates?

martin

Re: SSL Error

2012-04-19

GordyM wrote:

Has an answer been found yet?

If you check the tracker link above, you'll find that the bug has been fixed and will be included into the next release.

GordyM

SSL Error

2012-04-17 00:20

Has an answer been found yet?

Guest23

SSL3 alert read: fatal: unexpected_message

2011-12-27 14:26

Team,

can anyone help in resloving the error which i am getting while connecting to FTPS using WINSCP.

I am not sure that i need to do as i am able to connect using other softwares like IPswitch ws_FTP and cute ftp.

Only not able to work with WINSCP.

martin

Re: update?

2011-09-30

mhamberg wrote:

Is this working? Can we get an update?

Thanks for your help!

I've spent yesterday several hours trying to fix it. No luck so far.

mhamberg

update?

2011-09-28 13:20

Is this working? Can we get an update?

Thanks for your help!

martin

Re: timing

2011-09-20

mhamberg wrote:

Any idea when this bug will be fixed? I'd prefer to use WinSCP and not have to buy another FTP program. But I've got to get this up and running in the next two weeks.

I'll focus on it this week.

mhamberg

timing

2011-09-19 14:27

Any idea when this bug will be fixed? I'd prefer to use WinSCP and not have to buy another FTP program. But I've got to get this up and running in the next two weeks.

martin

Re: same issue with FTPS SSL_connect error

2011-08-30

Thanks for your post. This is likely releated to this issue:
https://winscp.net/tracker/668

mhamberg

in addition

2011-08-26 20:50

I should add I can connect just fine with Filezilla and this is my version of WINSCP:

WinSCP Version 4.3.4 (Build 1428) (OS 5.2.3790 Service Pack 2)

mhamberg

same issue with FTPS SSL_connect error

2011-08-26 20:45

I am also experiencing the same error in trying to FTPS a file to a remote server. It says "SSL_connect: error in SSLv2/v3 read server hello A"

Did anyone figure out how to resolve this?

Log looks like this:
2011-08-26 15:35:43.785 Transfer Protocol: FTP
. 2011-08-26 15:35:43.785 Ping type: C, Ping interval: 30 sec; Timeout: 15 sec
. 2011-08-26 15:35:43.785 Proxy: none
. 2011-08-26 15:35:43.785 FTP: FTPS: Implicit SSL/TLS; Passive: Yes [Force IP: No]
. 2011-08-26 15:35:43.785 Local directory: default, Remote directory: home, Update: No, Cache: Yes
. 2011-08-26 15:35:43.785 Cache directory changes: Yes, Permanent: Yes
. 2011-08-26 15:35:43.785 DST mode: 1
. 2011-08-26 15:35:43.785 --------------------------------------------------------------------------
. 2011-08-26 15:35:43.925 Connecting to www.mysite.com ...
. 2011-08-26 15:35:43.957 Connected with www.mysite.com, negotiating SSL connection...
. 2011-08-26 15:35:43.988 SSL_connect: error in SSLv2/v3 read server hello A
. 2011-08-26 15:35:43.988 Can't establish SSL connection
. 2011-08-26 15:35:43.988 Disconnected from server
. 2011-08-26 15:35:43.988 Connection failed.

martin

Re: error in SSLv2/v3 read

2011-05-11

Can you send me an email, so I can send you back a debug version of WinSCP to track the problem? Please include link back to this topic in your email. Also note in this topic that you have sent the email. Thanks.

You will find my address (if you log in) in my forum profile.

Guest

error in SSLv2/v3 read

2011-05-09 22:43

I can't get WINSCP to connect to a FTP site w/ SSL Explicit encyption.
The server certificate was issued by VeriSign and was fully trusted by the OS by default.

I can get this to work with CuteFTP but everything else I have done is using WinSCP - so I'd like to get it working with that.
I have queried "error in SSLv2/v3 read" but the results bring back no solutions.

Any ideas?

WinSCP Version 4.3.2 (Build 1201) (OS 6.1.7601 Service Pack 1)
< 2011-05-09 17:35:17.838 220 Service ready for new user
> 2011-05-09 17:35:17.838 AUTH SSL
< 2011-05-09 17:35:17.869 234 AUTH Command OK. Initializing SSL connection.
. 2011-05-09 17:35:18.103 SSL3 alert read: fatal: unexpected_message
. 2011-05-09 17:35:18.103 SSL_connect: error in SSLv2/v3 read server hello A
. 2011-05-09 17:35:18.103 Can't establish SSL connection
. 2011-05-09 17:35:18.103 Disconnected from server
. 2011-05-09 17:35:18.104 Connection failed.
. 2011-05-09 17:35:18.104 Got reply 1004 to the command 1
* 2011-05-09 17:35:18.109 (ESshFatal) Connection failed.
* 2011-05-09 17:35:18.109 SSL3 alert read: fatal: unexpected_message
* 2011-05-09 17:35:18.109 SSL_connect: error in SSLv2/v3 read server hello A
* 2011-05-09 17:35:18.109 Can't establish SSL connection
* 2011-05-09 17:35:18.109 Disconnected from server
* 2011-05-09 17:35:18.109 Connection failed.
* 2011-05-09 17:35:18.109 AUTH Command OK. Initializing SSL connection.

CUTEFTP 8.3
----------------------------------
220 Service ready for new user
STATUS:> [5/9/2011 5:16:22 PM] Connected. Authenticating...
COMMAND:> [5/9/2011 5:16:22 PM] AUTH SSL
[5/9/2011 5:16:22 PM] 234 AUTH Command OK. Initializing SSL connection.
STATUS:> [5/9/2011 5:16:22 PM] Establishing SSL session...
STATUS:> [5/9/2011 5:16:22 PM] Connected. Exchanging encryption keys...
STATUS:> [5/9/2011 5:16:22 PM] SSL Connect time: 341 ms.
STATUS:> [5/9/2011 5:16:22 PM] SSL encrypted session established.
COMMAND:> [5/9/2011 5:16:22 PM] PBSZ 0