http://blog.gmane.org/gmane.network.lftp.user hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.network.lftp.user/2234 <pre>Hello! lftp version 4.4.6 has been released. What's new: * improved sftp backend with symlink info retrieving (readlink). * new cls option -a to show dot files. * new setting cmd:cls-exact-time. * fixed NULL dereference when torrent:use-dht is off. * fixed torrent for info_hash with NUL character (broken in 4.4.4). </pre> Alexander V. Lukyanov 2013-05-17T13:15:29 http://comments.gmane.org/gmane.network.lftp.user/2232 <pre>We are running lftp Version 4.4.5 on Suse Linux 11.2 It uses Readline 6.0 When trying to do a put -a for some files, we are getting the error: put: cannot seek on data source Is there a fix or something we need to change to fix this error? Doug Freeman Nothing in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. Confidentiality Note: This message is intended only for the person or entity to which it is addressed. It may contain confidential and/or privileged material. Any review, transmission, dissemination or other use, or taking of any action in reliance upon this message by persons or entities other than the intended recipient is prohibited and may be unlawful. If you received this message in error, please contact the sender and delete it from your computer. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> doug.freeman< at >gm.com 2013-05-13T18:45:45 http://comments.gmane.org/gmane.network.lftp.user/2229 <pre>Are there server side requisites for the xfer:verify to work? Does it work with uploading files? I'm currently using the sync feature to send my files. $ cat ~/.lftp/rc set ftp:ssl-allow off set ftp:passive-mode 0 set xfer:clobber yes set xfer:verify yes set xfer:verify-command /usr/local/share/lftp/verify-file Transfer Command. lftp remote_site -e "mirror --verbose --delete --reverse --exclude-glob .* . /dest; ls; bye" I've turned on Debug, but I don't see the verify command running anywhere. </pre> Jason McLeod 2013-05-09T14:45:49 http://comments.gmane.org/gmane.network.lftp.user/2227 <pre>I want to transfer from FTPSOURCE: /some/dirs/This-Dir-Source into FTPDESTINY: /some/other/dirs/This-Dir-Destiny I can do it in one w ?ay that i know of: slot FTPDESTINY; mkdir /some/other/dirs/This-Dir-Destiny; cd /some/other/dirs/This-Dir-Destiny; slot FTPSOURCE; mirror /some/dirs/This-Dir-Source slot:FTPDESTINY Ok, that works but i think it looks awful. The problem with the approach above is if i have many of those commands, i have a feeling that lftp will get lost because the commands are not chained somehow. For example, when i execute the cmd aboce, imagine FTPDESTINY is busy at the time i try: slot FTPDESTINY; mkdir /some/other/dirs/This-Dir-Destiny; cd /some/other/dirs/This-Dir-Destiny; Then, FTPDESTINY was busy and conclusion: none of those commands were executed and i am at directory /the/wrong/directory/ And then comes the next command which is: slot FTPSOURCE; mirror /some/dirs/This-Dir-Source slot:FTPDESTINY And BAAAM, its going to mirror into /the/wrong/directory/ So to solve this, i think the whole tihng should be passed all together within one command so either the whole thing works or none of it... at least it will always act correctly. Here is my sugested command: mirror --source-slot=FTPSOURCE --source-dir=/some/dirs/This-Dir-Source --destiny-slot=FTPDESTINY --destiny-dir=/some/other/dirs/This-Dir-Destiny What do you guys think? Is this safe way possible already _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Hernan Lopes 2013-05-05T22:12:47 http://comments.gmane.org/gmane.network.lftp.user/2221 <pre>Hello, Aside from changing lftp to disable IPv6 support, is there a way to disable IPv6 for transfers or to prefer IPv4 for the initial connection? By default if IPv6 module/option is loaded in the Linux kernel it tries IPv6 first, can this be made an option to use one first over the other and/or use IPv4 or IPv6 explicitly? Example, when I tried to download this Linux ISO, it stalls for some time before it re-connects and tries the IPv4 address. lftp :~&gt; get http://ftp.heanet.ie/pub/scientific/livecd/64/x86_64/SL-64-x86_64-2013-04-17-LiveCD.iso ---- Connecting to ftp.heanet.ie (2001:770:18:aa40::c101:c140) port 80 `...86_64-2013-04-17-LiveCD.iso' at 0 [Connecting...] **** Socket error (Connection timed out) - reconnecting ---- Closing HTTP connection ---- Connecting to ftp.heanet.ie (193.1.193.64) port 80 ---- Sending request... (then it succeeds) $ host ftp.heanet.ie ftp.heanet.ie has address 193.1.193.64 ftp.heanet.ie has IPv6 address 2001:770:18:aa40::c101:c140 Justin. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Justin Piszcz 2013-04-23T22:00:02 http://comments.gmane.org/gmane.network.lftp.user/2219 <pre>Does anyone know the correct syntax for setting the LRECL and RECFM for a file being sent to the mainframe from Linux via lftp? I've tried a number of different combinations and cannot get it to work. It doesn't complain about it but it just gets the default of LRECL=80 on the mainframe. I don't do a lot of work on the mainframe so I'm hoping someone can help me. Thanks in advance. Doug Freeman Nothing in this message is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message. Confidentiality Note: This message is intended only for the person or entity to which it is addressed. It may contain confidential and/or privileged material. Any review, transmission, dissemination or other use, or taking of any action in reliance upon this message by persons or entities other than the intended recipient is prohibited and may be unlawful. If you received this message in error, please contact the sender and delete it from your computer. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> doug.freeman< at >gm.com 2013-04-23T19:34:43 http://comments.gmane.org/gmane.network.lftp.user/2217 <pre>_______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> binderda< at >gmx.at 2013-04-19T08:18:00 http://comments.gmane.org/gmane.network.lftp.user/2210 <pre>Hello, Im using lftp to upload my backups to several servers (drftpd). Since few week i have some Probleme with it. &lt;--- 200 Command okay ---&gt; USER xxxxxx &lt;--- 227- Using master for upcoming transfer &lt;--- 227 Entering Passive Mode (188,165,231.xxx,193,221). ---- Verbinde Daten Socket mit (188.165.231.xxx) Port 49629 ---- Datenverbindung hergestellt ---&gt; LIST &lt;--- 331 Password required for xxxxx. ---&gt; PASS xxxxx &lt;--- 150 File status okay; about to open data connection. Certificate: CN=drftpd Issued by: CN=drftpd WARNING: Certificate verification: Not trusted WARNING: Certificate verification: The certificate's owner does not match hostname '188.165.231.xxx' &lt;--- 230 user logged in successfully. ---&gt; PBSZ 0 &lt;--- 226 Closing data connection ---- Got EOF on data connection ---- Schließe den Daten Socket I get often this errors. I dont know why lftp close the connection. Maybe you have a bug in your new version? Im using LFTP | Version 4.0.6 Thank you!! _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Sven Bloch 2013-03-27T05:29:31 http://comments.gmane.org/gmane.network.lftp.user/2209 <pre>_______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Pascal Feldmann 2013-03-21T15:12:56 http://comments.gmane.org/gmane.network.lftp.user/2208 <pre>I am adding this to the mirror option. --exclude-glob distri/sites/.*/files/styles/ My plan is to exclude the styles directory fully. The problem is that it is insubfolders of distri/sites/foo/styles distri/sites/foo1/styles distri/sites/foo2/styles distri/sites/foobar/styles ... with the exclude option i posted above lftp will still download folders like: distri/sites/foobar/files/styles/square_thumbnail/public/rattan_ernte2.jpg thankys for helping me. I actually writing on a small script that mirrors an ftp to localhost: lftp -e " set ftp:list-options -a; set ftp:charset ISO-8859-15; set ssl:check-hostname no; set net:timeout 60; set net:max-retries 2; set net:reconnect-interval-base 5; open ftp://$user:$pass&lt; at &gt;$host; lcd $local_dir; cd $remote_dir; mirror--use-cache \ --parallel=3 \ --continue \ --delete \ --verbose=1 \ --exclude-glob screensnapr/ \ --exclude-glob usage/ \ --exclude-glob logs/ \ --exclude-glob cgi-bin/ \ --exclude-glob INCOMING/ \ --exclude-glob distri/sites/.*/files/styles/ \ --exclude-glob amazon/ quit" | tee log.txt _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> marco 2013-04-11T18:27:05 http://comments.gmane.org/gmane.network.lftp.user/2206 <pre>---&gt; CWD /Out &lt;--- 250 Directory changed to /Out ---&gt; PASV &lt;--- 425 Unable to set up passive listening socket. ---&gt; LIST ---&gt; ABOR I'm encountering an issue where lftp receives this message, and sends ABOR after which lftp will stay running, and not exit. The user login and authentication works fine. This is an FTPS connection also to the remote server. I'm working with remote server admins to see if there is an issue in allocation of passive ports from there end to client. But is there away, to make lftp exit quicker when this error occurs? Is there a specific cause of this 425 error? Is it on the server side or client side? </pre> Errol Casey 2013-04-04T15:44:32 http://comments.gmane.org/gmane.network.lftp.user/2204 <pre>Hello, We see some of our batch lftp processes spinning and we're not sure why/when. We don't yet know if it's FTPS only. I've built with debug and have the output here, can anyone see what could be the issue? strace shows absolutely nothing - blank. gdb: https://spodder.com/p/JBSFtJ6lPOHKTTEUO2Yfwdps and: https://spodder.com/p/ayJVud2sIxA3xEC3Bq4SZ7hD lsof: https://spodder.com/p/10w6SB96rrzVr4etXT1pSbpJD batch command file: https://spodder.com/p/6Y7APYSUkW2An1lYrqbXDJnK error log: https://spodder.com/p/4eVi7Fp0eHqGdAqkkTEX3pw0 version: https://spodder.com/p/BpFVjLA1BzvTr2B3e9YGoUmj any advice? C. -- +442077294797 (Office) +442031379505 (DDI) http://mediasp.com/ _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Charlie Allom 2013-03-28T15:09:32 http://comments.gmane.org/gmane.network.lftp.user/2201 <pre>Hi, I am compiling lftp 4.4.5 on CentOS 5.6 openssl and openssl-devel are both installed. I ran ./configure --prefix=/usr/local --with-openssl=/usr/lib which seemed fine, but when I run make I get the following error: /bin/sh ../libtool --silent --tag=CXX --mode=compile gcc -DHAVE_CONFIG_H -I. -I../lib -I../lib -I../trio -I/usr/lib/include -O2 -Wall -Wwrite-strings -Woverloaded-virtual -fno-exceptions -fno-rtti -fno-implement-inlines -MT lftp_ssl.lo -MD -MP -MF .deps/lftp_ssl.Tpo -c -o lftp_ssl.lo lftp_ssl.cc lftp_ssl.cc: In constructor 'lftp_ssl_openssl::lftp_ssl_openssl(int, lftp_ssl_base::handshake_mode_t, const char*)': lftp_ssl.cc:835: error: 'SSL_set_tlsext_host_name' was not declared in this scope make[1]: *** [lftp_ssl.lo] Error 1 make[1]: Leaving directory `/root/build/install/lftp-4.4.5/src' make: *** [all-recursive] Error 1 What can I do to fix this problem and install lftp with ssl? TIA Nuffi _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> nuffnough 2013-03-28T01:04:15 http://comments.gmane.org/gmane.network.lftp.user/2199 <pre>_______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> IOO TIS 2013-03-19T10:01:57 http://comments.gmane.org/gmane.network.lftp.user/2197 <pre>Sometimes I queue things that I have probably already downloaded, just to make sure I have them or that they are complete. This can make my queue look very large sometimes. An option to tidy the queue would be useful: it would go through the items in the queue and remove things which have already been completely downloaded. </pre> James Patterson 2013-03-15T09:05:52 http://comments.gmane.org/gmane.network.lftp.user/2196 <pre>I have tried to download the last stable version of lftp but: The requested page "/pub/source/lftp/lftp-4.4.5.tar.xz" could not be found. Regards. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Juan Simón 2013-03-14T15:37:25 http://comments.gmane.org/gmane.network.lftp.user/2193 <pre>Hello, I'm trying to automate mirroring of a group of files to my ISP's FTP servers. My ISP is using wild-card certificate signed by GeoTrust. Now I have downloaded GeoTrust CA cert and am trying to make lftp use it to verify FTP server cert. However, all verifications fail. I'm pretty sure this is the correct CA, since I have been successfully using it for long time with Opera and HTTP server which is using the same server cert as well. What I'm doing now: SSL_CA_FILE="$HOME/geotrust.pem" lftp -c "set ftp:list-options -a; set ssl:ca-file $SSL_CA_FILE open ftp://user:pass&lt; at &gt;host; set ssl:verify-certificate yes lcd /home/me/my/local/dir; cd /the/right/place; mirror --reverse \ --delete \ --verbose" And what I get is cd: Fatal error: Certificate verification: Not trusted mirror: Fatal error: Certificate verification: Not trusted With `debug 9`: http://pastebin.com/RXgfHt5 What is most confusing is the gnutls_x509_crt_list_import: The peer did not send any certificate. But certificate is shown in the output few lines below! (Also, I'm not sure if the gnome-keyring warning is relevant, I read that it is shown due to bug in Debian and has been showing in many other programs, but all seems to work...) How should I troubleshoot this? I tried other formats (p7, X.509) as well--behavior is the same. The version is 4.3.6, with GnuTLS 2.12.20, on Debian Wheezy. Thank you Alois Mahdal _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Alois Mahdal 2013-03-14T00:21:32 http://comments.gmane.org/gmane.network.lftp.user/2187 <pre>It would be really useful if ls -tr worked. It would also be useful if ls | grep "Mar 11" worked. My workaround of ls | grep Mar | grep 11 matches too many other things. If I am meant to put this in a bug tracker somewhere I will. Thanks! </pre> James Patterson 2013-03-12T09:27:56 http://comments.gmane.org/gmane.network.lftp.user/2186 <pre>Hi, I am having problem on a certain ftp server with lftp. The server runs ioftpd and I have no problems with ffxp or pftp. The issue is the following: on directories that has complete release including racestats and completed and other messages ( 0 size files) I get timeout when trying to do a ls or dir. `ls' at 0 [Waiting for response...] I have tried all the following: -set ftp:ssl-allow no: timeout -set ftp:port-ipv4 IP and set ftp:port-range port1-portn: timeout -set ftp:use-stat-for-list yes: it gets the list then timeout with stat the last message is, then timeout: 212 End of Status or at the 2nd attemp ---&gt; STAT -a som edditioanl log from pftp, it could be the section info is timing out. Mon Mar 11 09:47:01 2013 [13512 ] SERVER LOG LINE : &gt;&gt;&gt; LIST -la Mon Mar 11 09:47:01 2013 [13512 ] in control buffer is = 0 bytes Mon Mar 11 09:47:01 2013 [13512 ] wait for data and read will now select() Mon Mar 11 09:47:01 2013 [13512 ] wait for data and read received 78 bytes, already read was 0 Mon Mar 11 09:47:01 2013 [13512 ] SERVER LOG LINE : 150 Opening BINARY mode data connection for directory listing using SSL/TLS. Mon Mar 11 09:47:01 2013 [13512 ] in control buffer left = 0 bytes Mon Mar 11 09:47:01 2013 [13512 ] list done Mon Mar 11 09:47:01 2013 [13512 ] recieved filelist Mon Mar 11 09:47:01 2013 [13512 ] in control buffer is = 0 bytes Mon Mar 11 09:47:01 2013 [13512 ] wait for data and read will now select() Mon Mar 11 09:47:01 2013 [13512 ] wait for data and read received 141 bytes, already read was 0 Mon Mar 11 09:47:01 2013 [13512 ] SERVER LOG LINE : 226-[ Section: Default ] [ Ratio: Unlimited ] [ Credits: 0 MB ] Mon Mar 11 09:47:01 2013 [13512 ] SERVER LOG LINE : 226 [ UL: 108 GB ] [ DL: 7.56 GB ] [ Speed: 2973.1 KB/Sec ] [ Free: 845 GB ] Mon Mar 11 09:47:01 2013 [13512 ] in control buffer left = 0 bytes Mon Mar 11 09:47:01 2013 [13512 ] SERVER LOG LINE : &gt;&gt;&gt; TYPE I Mon Mar 11 09:47:01 2013 [13512 ] in control buffer is = 0 bytes Mon Mar 11 09:47:01 2013 [13512 ] wait for data and read will now select() _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> one2 2013-03-11T08:51:17 http://comments.gmane.org/gmane.network.lftp.user/2185 <pre>Dear , Could you help me with following problem ? RedHat v6.2 rpm -qa|grep lftp lftp-4.0.9-1.el6.x86_64 lftp -v LFTP | Version 4.0.9 | Copyright (c) 1996-2010 Alexander V. Lukyanov LFTP is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with LFTP. If not, see &lt;http://www.gnu.org/licenses/&gt;. Send bug reports and questions to the mailing list &lt;lftp&lt; at &gt;uniyar.ac.ru&gt;. Libraries used: Readline 6.0 lftp -e 'debug 13;set ftp:ssl-auth SSL;set ftp:ssl-protect-data true;set ftp:ssl-force true;set ftp:passive-mode true;set ssl:ca-file /etc/pki/CA/certs/Root_CA_2007.pem;set ssl:ca-file /etc/pki/CA/certs/ TEST__Root_CA.pem;set ssl:cert-file /home/mdr/ client-certificate/publiCert.pem;set -a;pwd;ls' -u XXX,YYY -p 16888 ftp://ftptest.dummy.be FileCopy(0x10b8b40) enters state INITIAL FileCopy(0x10b8b40) enters state DO_COPY copy: get hit eof copy: waiting for put confirmation FileCopy(0x10b8b40) enters state CONFIRM_WAIT set bmk:auto-sync yes set bmk:save-passwords no set cache:cache-empty-listings no set cache:enable yes set cache:expire 60m set cache:expire-negative 1m set cache:size 16M set cmd:at-exit "" set cmd:cls-completion-default -FB set cmd:cls-default -F set cmd:csh-history off set cmd:default-protocol ftp set cmd:default-title "lftp \\h:\\w&lt;file:///\\h:\w&gt;" set cmd:fail-exit no set cmd:interactive no set cmd:long-running 30 set cmd:ls-default "" set cmd:move-background yes set cmd:move-background-detach yes set cmd:parallel 1 set cmd:prompt "lftp \\S\\&lt;file:///\\S\&gt;? \\u\\&lt; at &gt;\\h:\\w&lt;file:///\\u\&lt; at &gt;\h:\w&gt;&gt; " set cmd:queue-parallel 1 set cmd:remote-completion on set cmd:save-cwd-history yes set cmd:save-rl-history yes set cmd:set-term-status no set cmd:status-interval 0.8s set cmd:stifle-rl-history 500 set cmd:term-status "" set cmd:term-status/*rxvt* "\\e[11;0]\\e]2;\\T\\007\\e[11]&lt;file:///\\e[11;0]\e%5d2;\T\007\e%5b11%5d&gt;" set cmd:term-status/*screen* \\e_\\T\\e\\&lt;file:///\\e_\T\e\&gt; set cmd:term-status/*xterm* "\\e[11;0]\\e]2;\\T\\007\\e[11]&lt;file:///\\e[11;0]\e%5d2;\T\007\e%5b11%5d&gt;" set cmd:time-style "%b %e %Y|%b %e %H:%M" set cmd:trace no set cmd:verbose no set cmd:verify-host yes set cmd:verify-path yes set cmd:verify-path-cached no set color:dir-colors "rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;05;37;41:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.tbz=01;31:*.tbz2=01;31:*.bz=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.axa=01;36:*.oga=01;36:*.spx=01;36:*.xspf=01;36:" set color:use-color auto set dns:SRV-query no set dns:cache-enable yes set dns:cache-expire 1h set dns:cache-size 256 set dns:fatal-timeout 7d set dns:max-retries 1000 set dns:order "inet6 inet" set dns:use-fork yes set file:charset UTF-8 set fish:charset "" set fish:connect-program "ssh -a -x" set fish:shell /bin/sh set ftp:abor-max-wait 15s set ftp:acct "" set ftp:anon-pass lftp&lt; at &gt; set ftp:anon-user anonymous set ftp:auto-passive-mode yes set ftp:auto-sync-mode "icrosoft FTP Service|MadGoat|MikroTik" set ftp:bind-data-socket yes set ftp:charset "" set ftp:client lftp/4.0.9 set ftp:device-prefix no set ftp:fix-pasv-address yes set ftp:fxp-force no set ftp:fxp-passive-source no set ftp:fxp-passive-sscn yes set ftp:home "" set ftp:ignore-pasv-address no set ftp:lang "" set ftp:list-empty-ok no set ftp:list-options "" set ftp:nop-interval 120 set ftp:passive-mode true set ftp:port-ipv4 "" set ftp:port-range full set ftp:prefer-epsv no set ftp:proxy "" set ftp:proxy-auth-type user set ftp:rest-list no set ftp:rest-stor yes set ftp:retry-530 "too many|overloaded|try (again |back )?later|is restricted to|maximum number|number of connect|only.*session.*allowed|more connection|already connected|simultaneous login" set ftp:retry-530-anonymous "Login incorrect" set ftp:site-group "" set ftp:skey-allow yes set ftp:skey-force no set ftp:ssl-allow yes set ftp:ssl-allow-anonymous no set ftp:ssl-auth SSL set ftp:ssl-copy-sid yes set ftp:ssl-data-use-keys yes set ftp:ssl-force true set ftp:ssl-protect-data true set ftp:ssl-protect-fxp no set ftp:ssl-protect-list yes set ftp:ssl-shutdown-timeout 5 set ftp:ssl-use-ccc no set ftp:stat-interval 1 set ftp:sync-mode on set ftp:sync-mode/ftp.idsoftware.com on set ftp:sync-mode/ftp.microsoft.com on set ftp:sync-mode/sunsolve.sun.com on set ftp:timezone GMT set ftp:trust-feat no set ftp:use-abor yes set ftp:use-allo yes set ftp:use-feat yes set ftp:use-fxp yes set ftp:use-hftp yes set ftp:use-mdtm yes set ftp:use-mdtm-overloaded no set ftp:use-mlsd no set ftp:use-pret yes set ftp:use-quit yes set ftp:use-site-chmod yes set ftp:use-site-idle no set ftp:use-site-utime yes set ftp:use-site-utime2 yes set ftp:use-size yes set ftp:use-stat yes set ftp:use-stat-for-list no set ftp:use-telnet-iac yes set ftp:verify-address no set ftp:verify-port no set ftp:waiting-150-timeout 5 set ftp:web-mode off set ftps:initial-prot "" set hftp:cache yes set hftp:cache-control "" set hftp:proxy "" set hftp:use-authorization yes set hftp:use-head yes set hftp:use-mkcol no set hftp:use-propfind no set hftp:use-type yes set http:accept */* set http:accept-charset "" set http:accept-language "" set http:authorization "" set http:cache yes set http:cache-control "" set http:cookie "" set http:post-content-type application/x-www-form-urlencoded set http:proxy "" set http:put-content-type "" set http:put-method PUT set http:referer "" set http:set-cookies no set http:use-mkcol yes set http:use-propfind no set http:user-agent lftp/4.0.9 set https:proxy "" set mirror:dereference no set mirror:exclude-regex "(^|/)(\\.in\\.|\\.nfs&lt;file:///\\.in\.|\.nfs&gt;)" set mirror:include-regex "" set mirror:order "*.sfv *.sig *.md5* *.sum * */" set mirror:parallel-directories yes set mirror:parallel-transfer-count 1 set mirror:set-permissions yes set mirror:skip-noaccess no set mirror:use-pget-n 1 set module:path /usr/lib64/lftp/4.0.9:/usr/lib64/lftp set net:connection-limit 0 set net:connection-takeover yes set net:idle 3m set net:limit-max 0 set net:limit-rate 0:0 set net:limit-total-max 0 set net:limit-total-rate 0:0 set net:max-retries 1000 set net:no-proxy "" set net:persist-retries 0 set net:reconnect-interval-base 30 set net:reconnect-interval-max 600 set net:reconnect-interval-multiplier 1.5 set net:socket-bind-ipv4 "" set net:socket-bind-ipv6 "" set net:socket-buffer 0 set net:socket-maxseg 0 set net:timeout 5m set pget:default-n 5 set pget:save-status 10s set sftp:charset "" set sftp:connect-program "ssh -a -x" set sftp:max-packets-in-flight 16 set sftp:protocol-version 4 set sftp:server-program sftp set sftp:size-read 32k set sftp:size-write 32k set sftp:use-full-path yes set ssl:ca-file /etc/pki/CA/certs/Banksys_TEST__Root_CA.pem set ssl:cert-file /home/mdr/atos-client-certificate/publiCertT59505.pem set ssl:check-hostname yes set ssl:crl-file "" set ssl:key-file "" set ssl:verify-certificate no set xfer:auto-rename no set xfer:buffer-size 0x10000 set xfer:clobber no set xfer:destination-directory "" set xfer:disk-full-fatal no set xfer:eta-period 120 set xfer:eta-terse yes set xfer:log yes set xfer:make-backup yes set xfer:max-redirections 10 set xfer:rate-period 15 set xfer:verify no set xfer:verify-command "" copy: put confirmed store FileCopy(0x10b8b40) enters state GET_DONE_WAIT copy: get is finished - all done FileCopy(0x10b8b40) enters state ALL_DONE FileCopy(0x10b6fc0) enters state INITIAL FileCopy(0x10b6fc0) enters state DO_COPY copy: get hit eof copy: waiting for put confirmation FileCopy(0x10b6fc0) enters state CONFIRM_WAIT ftp://XXX:YYY&lt; at &gt;ftptest.dummy.be:16888 copy: put confirmed store FileCopy(0x10b6fc0) enters state GET_DONE_WAIT copy: get is finished - all done FileCopy(0x10b6fc0) enters state ALL_DONE FileCopy(0x10b7110) enters state INITIAL FileCopy(0x10b7110) enters state DO_COPY ---- dns cache hit ---- Connecting to ftptest.dummy.be (xx.cc.vv.bb) port 16888 &lt;--- 220 Welcome to Synchrony Gateway FTP server ---&gt; FEAT &lt;--- 530 Not logged in ---&gt; AUTH SSL &lt;--- 234 AUTH command OK, waiting handshake ---&gt; USER 59505 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: DHE_PSK_SHA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_RSA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_DSS_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_ARCFOUR_SHA1 GNUTLS: HSK[0x10f33b0]: Keeping ciphersuite: RSA_ARCFOUR_MD5 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: PSK_SHA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_AES_256_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1 GNUTLS: EXT[0x10f33b0]: Sending extension CERT_TYPE GNUTLS: EXT[0x10f33b0]: Sending extension SAFE_RENEGOTIATION GNUTLS: HSK[0x10f33b0]: CLIENT HELLO was sent [93 bytes] GNUTLS: REC[0x10f33b0]: Sending Packet[0] Handshake(22) with length: 93 GNUTLS: REC[0x10f33b0]: Sent Packet[1] Handshake(22) with length: 98 GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: REC[0x10f33b0]: Expected Packet[0] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[0] Handshake(22) with length: 42 GNUTLS: REC[0x10f33b0]: Decrypted Packet[0] Handshake(22) with length: 42 GNUTLS: HSK[0x10f33b0]: SERVER HELLO was received [42 bytes] GNUTLS: HSK[0x10f33b0]: Server's version: 3.1 GNUTLS: HSK[0x10f33b0]: SessionID length: 0 GNUTLS: HSK[0x10f33b0]: SessionID: GNUTLS: HSK[0x10f33b0]: Selected cipher suite: RSA_AES_128_CBC_SHA1 GNUTLS: Allowing unsafe initial negotiation! GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: REC[0x10f33b0]: Expected Packet[1] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[1] Handshake(22) with length: 2761 GNUTLS: REC[0x10f33b0]: Expected Packet[1] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[1] Handshake(22) with length: 2761 GNUTLS: REC[0x10f33b0]: Expected Packet[1] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[1] Handshake(22) with length: 2761 GNUTLS: REC[0x10f33b0]: Decrypted Packet[1] Handshake(22) with length: 2761 GNUTLS: HSK[0x10f33b0]: CERTIFICATE was received [2761 bytes] GNUTLS: REC[0x10f33b0]: Expected Packet[2] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[2] Handshake(22) with length: 205 GNUTLS: REC[0x10f33b0]: Decrypted Packet[2] Handshake(22) with length: 205 GNUTLS: HSK[0x10f33b0]: CERTIFICATE REQUEST was received [205 bytes] GNUTLS: REC[0x10f33b0]: Expected Packet[3] Handshake(22) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[3] Handshake(22) with length: 4 GNUTLS: REC[0x10f33b0]: Decrypted Packet[3] Handshake(22) with length: 4 GNUTLS: HSK[0x10f33b0]: SERVER HELLO DONE was received [4 bytes] GNUTLS: HSK[0x10f33b0]: CERTIFICATE was sent [7 bytes] GNUTLS: REC[0x10f33b0]: Sending Packet[1] Handshake(22) with length: 7 GNUTLS: REC[0x10f33b0]: Sent Packet[2] Handshake(22) with length: 12 GNUTLS: HSK[0x10f33b0]: CLIENT KEY EXCHANGE was sent [134 bytes] GNUTLS: REC[0x10f33b0]: Sending Packet[2] Handshake(22) with length: 134 GNUTLS: REC[0x10f33b0]: Sent Packet[3] Handshake(22) with length: 139 GNUTLS: REC[0x10f33b0]: Sent ChangeCipherSpec GNUTLS: REC[0x10f33b0]: Sending Packet[3] Change Cipher Spec(20) with length: 1 GNUTLS: REC[0x10f33b0]: Sent Packet[4] Change Cipher Spec(20) with length: 6 GNUTLS: HSK[0x10f33b0]: Cipher Suite: RSA_AES_128_CBC_SHA1 GNUTLS: HSK[0x10f33b0]: Initializing internal [write] cipher sessions GNUTLS: HSK[0x10f33b0]: FINISHED was sent [16 bytes] GNUTLS: REC[0x10f33b0]: Sending Packet[0] Handshake(22) with length: 16 GNUTLS: REC[0x10f33b0]: Sent Packet[1] Handshake(22) with length: 85 GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again. GNUTLS: REC[0x10f33b0]: Expected Packet[4] Change Cipher Spec(20) with length: 1 GNUTLS: REC[0x10f33b0]: Received Packet[4] Alert(21) with length: 2 GNUTLS: REC[0x10f33b0]: Decrypted Packet[4] Alert(21) with length: 2 GNUTLS: REC[0x10f33b0]: Alert[2|40] - Handshake failed - was received **** gnutls_handshake: A TLS fatal alert has been received. ---- Closing control socket ls: Fatal error: gnutls_handshake: A TLS fatal alert has been received. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> Michel DE ROUCK 2013-03-06T21:31:06 http://comments.gmane.org/gmane.network.lftp.user/2184 <pre>Hello, I've got a difference between the lftp behaviour and the openssl's one : When trying to access distant server i get : ---- using password from ~/.netrc ---- Resolving host address... ---- 1 address found: xxx.xxx.xxx.xxx ---- Connecting to distant.host (xxx.xxx.xxx.xxx) port 21 &lt;--- 220 "..." ---&gt; FEAT &lt;--- 211-Features: &lt;--- AUTH SSL &lt;--- AUTH TLS &lt;--- EPRT &lt;--- EPSV &lt;--- MDTM &lt;--- PASV &lt;--- PBSZ &lt;--- PROT &lt;--- REST STREAM &lt;--- SIZE &lt;--- TVFS &lt;--- UTF8 &lt;--- 211 End ---&gt; AUTH TLS &lt;--- 234 Proceed with negotiation. ---&gt; OPTS UTF8 ON Certificate depth: 0; subject: *** censored *** ERROR: Certificate verification: unable to get local issuer certificate **** SSL_connect: unable to get local issuer certificate ---- Closing control socket cd: Fatal error: SSL_connect: unable to get local issuer certificate With configuration : lftp :~&gt; set -a | grep ssl set ftp:ssl-allow yes set ftp:ssl-allow-anonymous no set ftp:ssl-auth TLS set ftp:ssl-copy-sid yes set ftp:ssl-data-use-keys yes set ftp:ssl-force true set ftp:ssl-protect-data true set ftp:ssl-protect-fxp no set ftp:ssl-protect-list yes set ftp:ssl-shutdown-timeout 5 set ftp:ssl-use-ccc no set ssl:ca-file "" set ssl:ca-path /appli/lftp/certificate/ca/ set ssl:cert-file /appli/lftp/certificate/client.pem set ssl:check-hostname no set ssl:crl-file "" set ssl:crl-path "" set ssl:key-file /appli/lftp/certificate/privateKey.pem set ssl:verify-certificate yes The corresponding command with openssl works : openssl s_client -connect xxx.xxx.xxx.xxx:21 -starttls ftp -CApath /appli/lftp/certificate/ca/ The lftp library used : ldd /usr/local/bin/lftp ... libssl.so.0.9.8 =&gt; /usr/lib/libssl.so.0.9.8 (0x00007fb87ba7a000) ... And finally the version : lftp -version : LFTP | Version 4.3.8 | Copyright (c) 1996-2012 Alexander V. Lukyanov Libraries used: Readline 6.0, OpenSSL FIPS Object Module v1.2 Can you help me, i just can't manage to make it work. Thx. _______________________________________________ lftp mailing list lftp&lt; at &gt;uniyar.ac.ru http://univ.uniyar.ac.ru/mailman/listinfo/lftp </pre> PedroPoulpos 2013-03-06T14:58:15 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.network.lftp.user