Cyberduck Mountain Duck CLI

#8277 closed defect (thirdparty)

Unable to negotiate an acceptable set of security parameters

Reported by: dr4christ Owned by: dkocher
Priority: high Milestone:
Component: ftp-tls Version: 4.5.2
Severity: major Keywords:
Cc: Architecture:
Platform: Mac OS X 10.10

Description (last modified by dkocher)

Upated to OSX 10.10 and am using the latest Cyber Duck. We have been connecting before the OS X update via ftps:// - now when connecting to the same bookmark we are getting a

Ineroperability failure. "Handshake failure. Unable to negotiate an acceptable set of security parameters. Please contact your web hosting service provider for assistance"

220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------
220-You are user number 2 of 50 allowed.
220-Local time is now 16:10. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
AUTH TLS
234 AUTH TLS OK.

Deleted the bookmark - checked the FTP - even imported a explicit connection from Filezilla - but it will no longer connect via FTP-SSL just regular FTP. Now Filezilla will connect on explicit FTP over TLS. Contacted hosting and they said just use FileZilla - I DON"T LIKE FILEZILLA - HOW DO I GET MY CYBER DUCKY BACK?

Change History (7)

comment:1 Changed on Oct 24, 2014 at 7:05:52 AM by dkocher

  • Component changed from core to ftp-tls
  • Description modified (diff)
  • Owner set to dkocher

comment:2 Changed on Oct 24, 2014 at 7:06:21 AM by dkocher

  • Summary changed from Troubleshooting OS X 10.10 and FTP-SSL connection to Unable to negotiate an acceptable set of security parameters

comment:3 Changed on Oct 24, 2014 at 11:25:33 AM by dkocher

The error message means there is no match in negotiating the SSL ciphers to secure the connection. Can you let me know the server name or IP address which will allow us to look at the ciphers the server supports.

comment:4 Changed on Oct 24, 2014 at 1:14:04 PM by dkocher

  • Resolution set to thirdparty
  • Status changed from new to closed

comment:5 Changed on Oct 24, 2014 at 7:51:37 PM by dr4christ

Server name is AHS2.R4L.com - IP is 198.27.70.84

Hosting says you are wrong because we have proven that the FTP works with encryption with the FileZilla connection. Ciphers are secure. They say its a bug in Cyber Duck and or incompatibility issue with Mac OS X 10.10

I just want my Cyber Ducky back on FTP-SSL

comment:6 Changed on Oct 25, 2014 at 5:10:11 PM by dkocher

Trying to reproduce the issue here, the handshake is successful with TLS_RSA_WITH_AES_256_CBC_SHA as the negotiated cipher.

comment:7 Changed on Oct 25, 2014 at 6:16:30 PM by dkocher

  • Description modified (diff)
Note: See TracTickets for help on using tickets.