Bug#980119: libgnutls30: "An unexpected TLS packet was received" when connecting to FTPS (FTP/TLS) servers

[Boyd Stephen Smith Jr.]

On Saturday, January 16, 2021 2:26:52 PM CST Boyd Stephen Smith Jr. wrote:
> On Saturday, January 16, 2021 6:35:13 AM CST Andreas Metzler wrote:
> > Does
> > env GNUTLS_DEBUG_LEVEL=4711 lftp ....
> > produce more verbose output?
> 
> Yes.  But, probably not verbose enough:

I don't know about GNU TLS, but I got lftp to tell me more about what it is 
doing:
---8<---
% env GNUTLS_DEBUG_LEVEL=4711 lftp -e 'set cmd:trace yes' -e 'set log:enabled 
true' -u boyd.stephen.smith.jr at gmail.com.125388 bos-sr-2-36.akliz.net
gnutls[2]: Enabled GnuTLS 3.7.0 logging...
gnutls[2]: getrandom random generator was detected
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel SHA was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator (AVX) was detected
gnutls[2]: cfg: unable to access: /etc/gnutls/config: 2
Password: 
lftp boyd.stephen.smith.jr at gmail.com.125388@bos-sr-2-36.akliz.net:~> ls
---- Connecting to bos-sr-2-36.akliz.net (8.48.33.7) port 21
<--- 220 (vsFTPd 2.2.2)    
---> FEAT
<--- 211-Features:               
<---  AUTH SSL
<---  AUTH TLS
<---  EPRT
<---  EPSV
<---  MDTM
<---  PASV
<---  PBSZ
<---  PROT
<---  REST STREAM
<---  SIZE                       
<---  TVFS
<---  UTF8
<--- 211 End
---> AUTH TLS
<--- 234 Proceed with negotiation.
---> OPTS UTF8 ON
Certificate: CN=bos-sr-2-36.akliz.net
 Issued by:        C=US,O=Let's Encrypt,CN=R3
 Checking against: C=US,O=Let's Encrypt,CN=R3
  Trusted
Certificate: C=US,O=Let's Encrypt,CN=R3
 Issued by: O=Digital Signature Trust Co.,CN=DST Root CA X3
  Trusted
<--- 200 Always in UTF8 mode.
---> USER boyd.stephen.smith.jr at gmail.com.125388
<--- 331 Please specify the password.
---> PASS XXXX
<--- 230 Login successful.       
---> PWD
<--- 257 "/"                     
---> PBSZ 0
<--- 200 PBSZ set to 0.              
---> PROT P
<--- 200 PROT now Private.           
---> PASV
<--- 227 Entering Passive Mode (8,48,33,7,4,186).
---- Connecting data socket to (8.48.33.7) port 1210
---- Data connection established       
---> LIST
<--- 150 Here comes the directory listing.
**** gnutls_handshake: An unexpected TLS packet was received.
---- Closing data socket
**** gnutls_record_recv: An unexpected TLS packet was received.
---- Closing control socket
ls: Fatal error: gnutls_record_recv: An unexpected TLS packet was received.
lftp boyd.stephen.smith.jr at gmail.com.125388@bos-sr-2-36.akliz.net:/> bye
--->8---

-- 
Boyd Stephen Smith Jr.                   ,= ,-_-. =.
bss at iguanasuicide.net                   ((_/)o o(\_))
Twitter: @DaTwinkDaddy                   `-'(. .)`-'
http://iguanasuicide.net/                    \_/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnutls-maint/attachments/20210116/bdfa7714/attachment-0001.sig>