Login  
Search All Forums
Dart Home | PowerTCP FTP for .NET | Custom Development Reply | PowerTCP FTP for .NET Topics | Forums   
AuthorForum: PowerTCP FTP for .NET
Topic: Connection errors
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 20, 2005 2:48 PM

Hello,
When trying to use the secure FTP sample app, I receive the following error:

System.ApplicationException {"Request: PASS (password deleted)\r\nResponse: 530 SSL is mandatory.\r\n" } System.ApplicationException

The message displayed by the .net client is "An FTP protocol exception has occurred."

When running the sample code provided in the online help under the topic "Creating a secure FTP client," subhead "A More Advanced Secure Client: Validating certificates," I get this error:

"The message supplied for verification has been altered."

Can anyone point me in the right direction?

Thanks,
Joe
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 20, 2005 3:24 PM

You want to connect using Explicit security. Please try the sample ListView application, choosing Explicit security and see what happens.
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 20, 2005 3:34 PM

Thanks for such a quick reply.

When I try the sample windows app (C#, which incidentally, I had to modify before it would compile, because it contained references to the non-secure version of the FTP component, rather than the SecureFTP version), I get the same message.

"The message supplied for verification has been altered."
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 20, 2005 3:38 PM

Actually, if I run it several times in a row, I sometimes get the message "The specified data could not be decrypted" instead.
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 20, 2005 3:56 PM

Have you ever used another FTP client to connect successfully to this server? If so then what brand is it and what settings did you use?

If not then this looks like a type of server we have never encountered. If you can email the login info to support@dart.com, I may be able to figure something out.
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 20, 2005 4:06 PM

No, this is a new setup, so we've never connected to this server with any other component. Let me make sure I can send you the connection info. Thanks!

-- Joe
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 21, 2005 10:36 AM

Info sent to support@dart.com. Thanks.
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 21, 2005 12:16 PM

Thanks. While I did not get the same error as you, I was able to find the correct commands to send to get through. Your server wants the PROT command to be sent before any data is returned.

Here is how I logged in:

Starting with the sample ListView app, in the 'DoLogin' method, I added 2 lines right after the line where we get the directory:

//Login and get user's default directory
m_CurrentDirectory = ftp1.GetDirectory();
//Lines added for special case
ftp1.Invoke(FtpCommand.Null, "PBSZ 0");
ftp1.Invoke(FtpCommand.Null, "PROT P");

I then logged on using the info you supplied with 'PASV Mode' checked and 'Security' set to 'Explicit'

Please try that and see what happens.


JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 21, 2005 12:32 PM

Unfortunately, the line that throws the error is the GetDirectory call

m_CurrentDirectory = ftp1.GetDirectory();

so I never reach the new code you added. If you can get there, though, it sounds like a problem on my end. I'll get my network folks involved.

Thank you very much. Hopefully I can get this sorted out.

-- Joe
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 21, 2005 12:36 PM

What version is your Dart.PowerTCP.SecureFtp.dll?
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 21, 2005 12:45 PM

2.3.2.0
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 21, 2005 12:49 PM

Well, that's the same one I've got, so you should be able to get it to work.
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 21, 2005 12:53 PM

Again, thank you very much for your help. I'll post here if (hopefully when) I get the issue resolved.

-- Joe
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 23, 2005 12:38 PM

Problem identified, but not resolved. Our Checkpoint firewall is interpreting the connection attempt as an FTP bounce attack and is modifying the secure certificate, which results in the error messages I'm seeing.

There doesn't seem to be a way to disable this rule at the firewall (the "disable" option is grayed-out, even for our top admins).

Any thoughts on this? My folks are puzzled.

Thanks,
-- Joe
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 27, 2005 9:48 AM

The first thing I would do is check with the company that supports your Checkpoint Firewall and ask if they have specific instructions for using Secure FTP.
JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 27, 2005 10:58 AM

Thanks. We found another sftp control that works through our firewall. I'm disappointed that we weren't able to ge the Dart control working, as I've used Dart products with great success in the past and am thoroughly impressed with the level of support you provide.

Oddly, the control we found, SFTP.NET from "WeOnlyDo.com," claims to be using SSH, although this server we're using is SSL and you were able to connect to it with the Dart control from your location.

Thanks again for all your assistance. Very much appreciated.
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 27, 2005 11:52 AM

if WeOnlyDo works, then it is SSH. That is also why we don't work with it. My guess is that the Firewall is setup to allow SSH but not SSL. The FTP server supports both, but the firewall only works with SSH.

JPT

From: Horsham, PA USA
Posts: 11
Member Since: 12/20/05
posted December 27, 2005 2:10 PM

Sounds very reasonable. I don't have a high degree of confidence in the folks running the server we're trying to connect to, so it wouldn't surprise me that we got faulty technical info from them.

Thanks again for all of your time, Tony. Definitely above and beyond, and Dart will remain at the top of our short list of preferred component vendors, even if we can't use your ftp solution in this case.

-- Joe
Tony Priest



From: Utica, NY USA
Posts: 8466
Member Since: 04/11/00
posted December 27, 2005 2:57 PM

No problem. Thanks for the kind words!
Reply | PowerTCP FTP for .NET Topics | Forums   
This site is powered by PowerTCP WebServer Tool PowerTCP WebServer for ActiveX