Forum » Support and Bug Reports »

Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Username

Subject

Message body

Font colour:

Font size:

[quote="Howard123"]Dear WinSCP support;

I'm trying to write a WinSCP/Powershell script to connect a FTP server ([b]TLS Explicit with untrusted certificate[/b])

I have no problem to manually connect to this FTP server using the WinSCP graphical interface.
Here is the automatically generated Powershell code from WinSCP "Generate session URL/code" tool :

[code]# Load WinSCP .NET assembly
Add-Type -Path "WinSCPnet.dll"

# Set up session options
$sessionOptions = New-Object WinSCP.SessionOptions -Property @{
    Protocol = [WinSCP.Protocol]::Ftp
    HostName = "xxx.xxx.xxx.xxx"
    PortNumber = 21
    UserName = "xxxxxx"
    Password = "xxxxxx"
    FtpSecure = [WinSCP.FtpSecure]::Explicit
}

$session = New-Object WinSCP.Session

try
{
    # Connect
    $session.Open($sessionOptions)

# Your code
}
finally
{
    $session.Dispose()
}[/code]

Since, this automatically generated code doesn't include the TLS Host Certificate, I get the following error message when I try to call it from a PS1 script :

[quote]Error: Connection failed.
Server asks for authentication with a client certificate.
Peer certificate rejected
Disconnected from server
Connection failed.[/quote]

So I tried to include the certificate fingerprint into the script, by setting the [code]TlsHostCertificateFingerprint [/code]parameter :

[code]# Load WinSCP .NET assembly
Add-Type -Path "WinSCPnet.dll"

$session = New-Object WinSCP.Session

try
{
    # Connect
    $session.Open($sessionOptions)

# Your code
}
finally
{
    $session.Dispose()
}[/code]

I'm 100% confident that my certificate fingerprint is correct since it is the one indicated in "Server and protocol information" when I'm connected via WinSCP graphical mode.

Unfortunately this doens't work, when I run the script it gives the error message :

[code]Error: Authentication failed[/code]

As anyone experience the same problem?

Thanks in advance for your help

howard[/quote]

Options

Disable BBCode in this post

Notify me when a reply is posted (registered users only)

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

Filename

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

File Comment

Options

Private file (available to author and site moderators only)

Topic review

Howard123

2017-02-22 09:06

Nevermind I found what the problem was...There was a special character in the password...
I managed to fix this by adding single quote in front of the special character :)

Howard123

TlsHostCertificateFingerprint not working when called from Powershell script

2017-02-22 06:57

Dear WinSCP support;

I'm trying to write a WinSCP/Powershell script to connect a FTP server (TLS Explicit with untrusted certificate)

I have no problem to manually connect to this FTP server using the WinSCP graphical interface.
Here is the automatically generated Powershell code from WinSCP "Generate session URL/code" tool :

# Load WinSCP .NET assembly

Add-Type -Path "WinSCPnet.dll"



# Set up session options

$sessionOptions = New-Object WinSCP.SessionOptions -Property @{

    Protocol = [WinSCP.Protocol]::Ftp

    HostName = "xxx.xxx.xxx.xxx"

    PortNumber = 21

    UserName = "xxxxxx"

    Password = "xxxxxx"

    FtpSecure = [WinSCP.FtpSecure]::Explicit

}



$session = New-Object WinSCP.Session



try

{

    # Connect

    $session.Open($sessionOptions)



    # Your code

}

finally

{

    $session.Dispose()

}

Since, this automatically generated code doesn't include the TLS Host Certificate, I get the following error message when I try to call it from a PS1 script :

Error: Connection failed.
Server asks for authentication with a client certificate.
Peer certificate rejected
Disconnected from server
Connection failed.

So I tried to include the certificate fingerprint into the script, by setting the

TlsHostCertificateFingerprint

parameter :

# Load WinSCP .NET assembly

Add-Type -Path "WinSCPnet.dll"



# Set up session options

$sessionOptions = New-Object WinSCP.SessionOptions -Property @{

    Protocol = [WinSCP.Protocol]::Ftp

    HostName = "xxx.xxx.xxx.xxx"

    PortNumber = 21

    UserName = "xxxxxx"

    Password = "xxxxxx"

    FtpSecure = [WinSCP.FtpSecure]::Explicit

    TlsHostCertificateFingerprint = "x:x:x:xx:x:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx"

}



$session = New-Object WinSCP.Session



try

{

    # Connect

    $session.Open($sessionOptions)



    # Your code

}

finally

{

    $session.Dispose()

}

I'm 100% confident that my certificate fingerprint is correct since it is the one indicated in "Server and protocol information" when I'm connected via WinSCP graphical mode.

Unfortunately this doens't work, when I run the script it gives the error message :

Error: Authentication failed

As anyone experience the same problem?

Thanks in advance for your help

howard

Post a reply

Topic review

TlsHostCertificateFingerprint not working when called from Powershell script

Documentation

Support

Associations

Follow Us