Connexion :: Support Forum

METAILLIER/FRANCE Guest

Connexion

2010-08-15 09:06

Hello,
I try to connect to my remote server. Please note I have any knowing at all in Linux or protocols ...

I do not find a subject similar in FAQ, and often, answers are too hard to understand.

Remote server : DSM 2.0-0722
Local station : Windows XP Home SP3 / WinSCP 4.2.8
Connexion : FTP/SSL/TLS (checked in the FTP configuration of the server)
Fix IP of the server maintened by DYNDNS (so DHCP is something about myserv.dyndns.org)
FTP port is configured different from 990, let say nnnn
I am admin in the server, with password (there are others users, also with passwords)

After a few tests, I connect to my server OK, with admin+password. Then, system noted me than certificate of the serveur cannot be verify (what I knew), and ask me if I authorise always (or record the certificate), or if I authorise only this time. As it was the 1st connexion, and tests, I checked only this time. And "played" with transferts very easily in WinSCP.

Then I closed WinSCP ... and I never could connect again !
I see the message :
SSL_connect : error in SSLv2/v3 read server hello A
Connexion SSL impossible � obtenir (in english more or less impossible to set)
D�connect� du serveur (in english more or less logged off)
La connexion a �chou�e (in english more or less no connexion)

I suspect a sort of controler who blocks the connexion because I already use ONE TIME the unknowed certificate ?

Thank you very much for your help.

N.METAILLIER
noel.metaillier.sqa@wanadoo.fr

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,517
Location:: Prague, Czechia

Re: Connexion

2010-08-15

Please post a full log file showing the problem.

To generate log file, enable logging, log in to your server and do the operation and only the operation that causes the error. For posting extensive logs you may use pastebin or similar application. Note that passwords and passphrases not stored in the log. You may want to remove other data you consider sensitive though, such as host names, IP addresses, account names or file names (unless they are relevant to the problem). If you do not want to post the log publicly, you may email it to me. You will find my address (if you log in) in my forum profile. Please include link back to this topic in your email. Also note in this topic that you have emailed the log.

Reply with quote

Guest

Re: Connexion

2010-08-17 14:34

Thank you for answer.

Please find here log file :

. 2010-08-17 15:12:24.203 --------------------------------------------------------------------------
. 2010-08-17 15:12:24.203 WinSCP Version 4.2.8 (Build 818) (OS 5.1.2600 Service Pack 3)
. 2010-08-17 15:12:24.218 Login time: mardi 17 août 2010 15:12:24
. 2010-08-17 15:12:24.218 --------------------------------------------------------------------------
. 2010-08-17 15:12:24.218 Session name: admin@myserv.dyndns.org
. 2010-08-17 15:12:24.218 Host name: myserv.dyndns.org (Port: nnnn)
. 2010-08-17 15:12:24.218 User name: admin (Password: No, Key file: No)
. 2010-08-17 15:12:24.218 Tunnel: No
. 2010-08-17 15:12:24.218 Transfer Protocol: FTP
. 2010-08-17 15:12:24.218 Ping type: C, Ping interval: 30 sec; Timeout: 15 sec
. 2010-08-17 15:12:24.218 Proxy: none
. 2010-08-17 15:12:24.218 FTP: FTPS: Implicit SSL/TLS; Passive: No [Force IP: No]
. 2010-08-17 15:12:24.218 Local directory: default, Remote directory: home, Update: No, Cache: Yes
. 2010-08-17 15:12:24.218 Cache directory changes: Yes, Permanent: Yes
. 2010-08-17 15:12:24.218 DST mode: 1
. 2010-08-17 15:12:24.218 --------------------------------------------------------------------------
. 2010-08-17 15:12:24.250 Password prompt (no password provided or last login attempt failed)
. 2010-08-17 15:12:40.984 Connexion à myserv.dyndns.org:nnnn...
. 2010-08-17 15:12:41.421 m_pSslLayer changed state from 0 to 1
. 2010-08-17 15:12:41.437 m_pSslLayer changed state from 1 to 2
. 2010-08-17 15:12:41.437 m_pSslLayer changed state from 2 to 4
. 2010-08-17 15:12:41.437 Connecté à myserv.dyndns.org:nnnn, négociation de la connexion SSL...
. 2010-08-17 15:12:41.453 SSL_connect: error in SSLv2/v3 read server hello A
. 2010-08-17 15:12:41.453 Connexion SSL impossible à établir
. 2010-08-17 15:12:41.453 Déconnecté du serveur
. 2010-08-17 15:12:41.453 La connexion a échouée.
. 2010-08-17 15:12:41.453 Got reply 1004 to the command 1
* 2010-08-17 15:12:41.468 (ESshFatal) La connexion a échouée.
* 2010-08-17 15:12:41.468 SSL_connect: error in SSLv2/v3 read server hello A
* 2010-08-17 15:12:41.468 Connexion SSL impossible à établir
* 2010-08-17 15:12:41.468 Déconnecté du serveur
* 2010-08-17 15:12:41.468 La connexion a échouée.

Please note than yesterday, I updated my server to DSM 2.3 (hoping it would reset parameters ...). Update goes well, but I saw in the connexion journal of the server the entry :

System failed to register [999.999.999.999] to [myserv.dyndns.org] in DDNS server [DYNDNS.org] because of [Authentication Failed].

Please note also than all others operations with the server are OK (local disks sharing, remote photos access, remote administration and files organization).

Thank you very much for your help.

N.METAILLIER
noel.metaillier.sqa@wanadoo.fr

Reply with quote