Test SSL Certificate on a FTP server

[mrw]

Hi,
We have a FTP server that is configured with a self-signed certificate for TLS via FTPS.
I´m trying to do the Certificate test but it fails with a "SSL handshake failed. error 1408F10B:SSL routines:ssl3_get_record:wrong version number".
Any idea on what I can do to fix this?
I also tried the option to use the "File/Folder availability" test with a ftps:// path, but it also fails with the error "276: Unrecognized SSL packet data received".
Do I need to download and approve the certificate somehow?

Thanks in advance,
//Andreas..

[KS-Soft]

This test designed for Web Servers, but sometimes may work for POP3, IMAP, FTPS, etc
What SSL, TLS versions supported by the server?
HostMonitor version?

Do I need to download and approve the certificate somehow?

No

Regards
Alex

[mrw]

Hi,

Hostmonitor version is v14.80 and I currently do the test via an active RMA, but I get the same problem directly from the hostmonitor server.

I understand that the Certificate test might be a long shot, but since I got this odd message perhaps it is fixable?

And what about the "File/Folder availability" test? Should that work for FTPS connections ?

//Andreas..

[KS-Soft]

And what about the "File/Folder availability" test? Should that work for FTPS connections ?

Yes, it supports FTPS but this test uses different code and works differently

You missed important question - What SSL, TLS versions supported by the server? Ciphers?

I got this odd message perhaps it is fixable?

Its not odd, it means protocols or ciphers used by the server are not supported (not supported yet or not supported anymore).

Regards
Alex

[mrw]

Ah, sorry I missed that question.
But this FTP server is the latest FileZilla server(currently v 1.9.4) which uses Explicit FTP over TLS, and the settings are:
Minimum TLS: v1.2 (1.3 is also supported)
Certificate has a SHA-256 fingerprint and is self-signed by the FileZilla server.

Not sure if I can get any more info from the server.

Does that help?

Regards,
//Andreas..

[KS-Soft]

TLS 1.2 is supported, TLS 1.3 as well with some limitations.
Can you provide public IP of your server for testing? As usually its better to use e-mail, not forum.

Regards
Alex