FTP fails because of SSL certificate?

jimlongo

Well-Known Member
Mar 20, 2008
288
24
68
I seem to be having difficulties connecting via FTP on port 21.

The message depending on client usually runs along the lines of "SSL certificate failed to load or verify".

I've tried connecting to the domain and the IP, always the same message.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
Hello,

Do you notice any particular output to /var/log/messages when this happens?

Thank you.
 

jimlongo

Well-Known Member
Mar 20, 2008
288
24
68
nothing noteable

Code:
Mar 20 16:02:03 vps pure-ftpd: ([email protected].0.1) [INFO] New connection from 127.0.0.1
Mar 20 16:02:03 vps pure-ftpd: ([email protected]) [INFO] __cpanel__service__auth__ftpd__SGuRhZE1JOVLszz9pNzhK7BXGjggWeCEr3NQ7eLqIL1OpE2u09Taf24XLcZ1USPQ is now logged in
Mar 20 16:02:03 vps pure-ftpd: (__cpanel__service__auth__ftpd__S[email protected]127.0.0.1) [INFO] Logout.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
Hello,

FTP does not support serving domain-specific certificates in response to TLS SNI requests.There's an open feature request for this functionality at:

SNI support for FTP

In the meantime, the best approach to avoid that warning message is to connect to FTP using the hostname referenced for the FTP service in "WHM Home » Service Configuration » Manage Service SSL Certificates". Can you verify if that solves the error message you are encountering?

Thank you.
 

janipewter

Active Member
Jan 2, 2013
44
3
8
cPanel Access Level
Root Administrator
Is there any update on this? It would be great if cPanel supported TLS SNI for FTP connections. All of my clients get certificate warnings in Filezilla when connecting to FTP if they use their own domain, as the server presents only a certificate for the server's hostname.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
Hello @janipewter,

As noted by @Jcats, there's no update to report at this time. That said, there's some recent discussion of this topic over on the feature request:

SNI support for FTP

I encourage you to vote and add your feedback to the feature request if you'd like to see it implemented.

Thank you.