NetTalk Central

NetTalk FTP => FTP - Ask For Help => Topic started by: Ubaidullah on June 23, 2020, 05:19:03 AM

Title: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Ubaidullah on June 23, 2020, 05:19:03 AM

Hi Bruce,

When connecting to an FTP server using Explicit SSL over port 21, I am getting the following error:

The error number was -69 which means The SSL Remote Certificate Failed Verification.

Command = user

I thought it might be due to CARoot.pem being old, so I downloaded the latest from Mozilla but the error still persists.

I am able to connect to this same server using Total Commander without any issue, so the issue seems to be from my side.

I will appreciate your guidance on how to resolve this.

Thanks.

Title: Re: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Bruce on June 23, 2020, 06:40:31 PM

I'd need to see the connection to be sure.
Send me the name of the server. (I don't need a login.)

cheers
Bruce

Title: Re: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Ubaidullah on June 24, 2020, 12:58:10 AM

The server is at: b2bmft.cat.com

Regards,
Ubaidullah Nubar.

Title: Re: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Bruce on June 24, 2020, 07:25:47 PM

so the certificate common name does not match the server name you are using. So set;
    FtpControl.SSLCertificateOptions.DontVerifyRemoteCertificateCommonName = 1
    FtpData.SSLCertificateOptions.DontVerifyRemoteCertificateCommonName = 1

Cheers
Bruce

Title: Re: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Ubaidullah on June 25, 2020, 02:49:44 AM

I am still getting the same error.

I placed the code you suggested before the call to thisFtpControl.GetRemoteFile

thisFtpControl.SSLCertificateOptions.DontVerifyRemoteCertificateCommonName = 1
thisFtpData.SSLCertificateOptions.DontVerifyRemoteCertificateCommonName = 1


Any other suggestions to resolve this ?

Regards,
Ubaidullah Nubar.

Title: Re: FTP Error -69 - The SSL Remote Certificate Failed Verification
Post by: Ubaidullah on June 25, 2020, 04:30:29 AM

I got it working by setting the following:

    thisFtpControl.SSLCertificateOptions.CertificateFile = ''
    thisFtpControl.SSLCertificateOptions.PrivateKeyFile = ''
    thisFtpControl.SSLCertificateOptions.DontVerifyRemoteCertificateCommonName = 1
    thisFtpControl.SSLCertificateOptions.DontVerifyRemoteCertificateWithCARoot = 1


Thanks for the help. It got me going in the right direction.

Regards,
Ubaidullah Nubar.