New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Handshake failure because of missing strong ciphers to negotiate #8703
Comments
We require the server to support one of |
Thank your for prompt attention to the matter. The proposed solutions however seems unlikely to explain the problem as FileZilla is able to successfully establish TLSv1.2 connection with the server. Here is the relevant part of FileZilla's connection log:
In contrast, CyberDuck tells me
and then aborts with the handshake failure error. In case this is relevant. The server runs Pure-FTPd and the hosting provider tells me that to connect to the server I need to use ftp client supporting TLSv1 or higher. They do not support SSLv2 for safety reasons. |
I have the same issue towards a server I control. And as I control it I know it supports TLS v1.2. As user I think I have found out why Cyberduck can't connect to my server. It seems to only support "weak" hash algorithms in the cipher suites it offers. The below is from a Wireshark trace I just made:
I have my FTP server (PureFTPD) configured to use the following suites:
As you see there's no support for The server therefore answers as follows:
I think this is clearly a Cyberduck issue. PS: For me it's OS X 10.10.3. |
Replying to [comment:5 ralf bergs]: Thanks for your detailed comment. Supported ciphers has changed in the latest snapshot build. Current supported supported ciphers are
Please update to the latest snapshot build available. |
Replying to [comment:6 dkocher]:
I can confirm that this fixed the issue for me. Thank you very much. |
Cyberduck 4.7 fixed the problem. Thank you! |
I am using Cyberduck 4.6.5 on Mac OSX 10.9.5. When trying to connect to
webspace.bol.ucla.edu
over FTP-SSL (Explicit AUTH TLS), I am getting the eror messageI have tried it a dozen of times; same failure every time. I was able to connect on FileZilla after confirming that the certificate authority is trusted (Cyberduck did not ask certificate authority question).
The issue resembles Ticket #8277. That ticket was closed as third party failure. I don't see any third party failure in my connection attempts and other FTP clients work fine.
The text was updated successfully, but these errors were encountered: