Archived Forum Post

Index of archived forum posts

Question:

Cannot Build ClientKeyExchange , missing server certificate - never seen!

Aug 05 '15 at 13:55

Using Ftp2 for a .net desktop application, getting this error,

ChilkatLog:
  SetSslClientCert:
    DllDate: Mar 21 2014
    ChilkatVersion: 9.5.0.21
    UnlockPrefix: DMVCAGFTP
    Username: DOBS-TRANS01:jvondriska
    Architecture: Little Endian; 32-bit
    Language: .NET 2.0
    VerboseLogging: 1
    hasPrivateKey:
      hasKey: 1
    --hasPrivateKey
    The certificate has an associated private key.
    The private key is exportable.
  --SetSslClientCert
  Success.
--ChilkatLog
ChilkatLog:
  Connect_Ftp2:
    DllDate: Mar 21 2014
    ChilkatVersion: 9.5.0.21
    UnlockPrefix: DMVCAGFTP
    Username: DOBS-TRANS01:jvondriska
    Architecture: Little Endian; 32-bit
    Language: .NET 2.0
    VerboseLogging: 1
    ProgressMonitoring:
      enabled: yes
      heartbeatMs: 0
      sendBufferSize: 65536
    --ProgressMonitoring
    ImplicitSsl: 0
    AuthTls: 1
    AuthSsl: 1
    Hostname: sft.dmv.ca.gov
    Port: 2121
    IdleTimeoutMs: 60000
    ConnectTimeout: 20000
    connect2:
      hostname: sft.dmv.ca.gov
      port: 2121
      ssl: 0
      connectSocket:
        domainOrIpAddress: sft.dmv.ca.gov
        port: 2121
        connectTimeoutMs: 20000000
        connect_ipv6_or_ipv4:
          Multi-threaded domain to IP address resolution
          AddrInfoList:
            AddrInfo:
              ai_flags: 0
              ai_family: 2
              ai_socktype: 0
              ai_protocol: 0
              ai_addrlen: 16
              ai_canonname: (NULL)
            --AddrInfo
          --AddrInfoList
          connecting to IPV4 address...
          ipAddress: 205.225.192.110
          connect:
            Waiting for the connect to complete...
            myIP: 10.242.2.72
            myPort: 49510
            socket connect successful.
          --connect
        --connect_ipv6_or_ipv4
      --connectSocket
    --connect2
    Turning on TCP_NODELAY.
    socketOptions:
      SO_SNDBUF: 8192
      SO_RCVBUF: 8192
      TCP_NODELAY: 1
    --socketOptions
    readCommandResponse:
      replyLineQP: 220-DMV Secure File Transfer
      replyLineQP: 220-
      replyLineQP: 220-
      replyLineQP: 220 Secure FTP Server ready.
      commandResponse: 220-DMV Secure File Transfer
220-
220-
220 Secure FTP Server ready.
      statusCode: 220
      readResponse: Elapsed time: 234 millisec
    --readCommandResponse
    initialStatus: 220
    initialResponse: 220-DMV Secure File Transfer
220-
220-
220 Secure FTP Server ready.
    converting to secure connection...
    authTls:
      sendCommand:
        sendingCommand: AUTH TLS
      --sendCommand
      readCommandResponse:
        replyLineQP: 234 TLSv1
        commandResponse: 234 TLSv1
        statusCode: 234
        readResponse: Elapsed time: 32 millisec
      --readCommandResponse
      ssl_protocol: 0
      convertToTls:
        clientHandshake:
          cacheClientCerts:
            Found cert with private key.
            CurrentUserMyCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: C=US, S=California, L=Sacramento, O=State of California - DMV, OU=DMV (Script Generated), CN=mvxcnusd-x509,
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
            --CurrentUserMyCertStore
            LocalMachineMyCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: ,
            --LocalMachineMyCertStore
            CurrentUserCaCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4,
              subjectX500: DC=com, DC=microsoft, DC=corp, DC=redmond, CN=MSIT Machine Auth CA 2,
              subjectX500: DC=gov, DC=va, OU=Services, OU=PKI, CN=Veterans Affairs Device CA B2,
              subjectX500: C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority,
              subjectX500: C=US, O="GeoTrust, Inc.", CN=RapidSSL CA,
              subjectX500: C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA,
              subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High-Assurance Secure Server CA,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA - G3,
              subjectX500: CN=Microsoft Internet Authority,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2,
              subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DoD Root CA 2,
              subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DOD EMAIL CA-31,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)06, CN=VeriSign Class 3 Extended Validation SSL SGC CA,
              subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DOD EMAIL CA-30,
              subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware,
              subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2,
              subjectX500: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA,
              subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA,
              subjectX500: C=US, O=GeoTrust Inc., CN=RapidSSL SHA256 CA - G3,
              subjectX500: C=US, O=Betrusted US Inc, OU=SSP, OU=Betrusted Production SSP CA A1, CN=Betrusted Production SSP CA A1,
              subjectX500: CN=Root Agency,
              subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign,
              subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA,
              subjectX500: DC=us, DC=ca, DC=k12, DC=cnusd, CN=Corona-Norco Unified School District Issuing CA,
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Windows Hardware Compatibility Intermediate CA, OU=Microsoft Corporation, CN=Microsoft Windows Hardware Compatibility,
            --CurrentUserCaCertStore
            LocalMachineCaCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: CN=Root Agency,
              subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign,
              subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA,
              subjectX500: DC=us, DC=ca, DC=k12, DC=cnusd, CN=Corona-Norco Unified School District Issuing CA,
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Windows Hardware Compatibility Intermediate CA, OU=Microsoft Corporation, CN=Microsoft Windows Hardware Compatibility,
            --LocalMachineCaCertStore
            CurrentUserRootCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority,
              subjectX500: C=ZA, S=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA,
              subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010,
              subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3,
              subjectX500: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA,
              subjectX500: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root,
              subjectX500: C=US, O=Equifax, OU=Equifax Secure Certificate Authority,
              subjectX500: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2,
              subjectX500: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority,
              subjectX500: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA,
              subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority,
              subjectX500: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA,
              subjectX500: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority,
              subjectX500: C=US, O=GTE Corporation, OU="GTE CyberTrust Solutions, Inc.", CN=GTE CyberTrust Global Root,
              subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA,
              subjectX500: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011,
              subjectX500: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2009 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - G2,
              subjectX500: C=US, O=SecureTrust Corporation, CN=SecureTrust CA,
              subjectX500: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority,
              subjectX500: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA,
              subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC,
              subjectX500: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048),
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5,
              subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2,
              subjectX500: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority,
              subjectX500: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA,
              subjectX500: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root,
              subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA,
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority,
              subjectX500: O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.,
              subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.",
              subjectX500: L=Internet, O="VeriSign, Inc.", OU=VeriSign Commercial Software Publishers CA,
            --CurrentUserRootCertStore
            LocalMachineRootCertStore:
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority,
              subjectX500: C=ZA, S=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA,
              subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010,
              subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3,
              subjectX500: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA,
              subjectX500: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root,
              subjectX500: C=US, O=Equifax, OU=Equifax Secure Certificate Authority,
              subjectX500: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2,
              subjectX500: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority,
              subjectX500: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA,
              subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority,
              subjectX500: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA,
              subjectX500: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority,
              subjectX500: C=US, O=GTE Corporation, OU="GTE CyberTrust Solutions, Inc.", CN=GTE CyberTrust Global Root,
              subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA,
              subjectX500: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA,
              subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011,
              subjectX500: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2009 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - G2,
              subjectX500: C=US, O=SecureTrust Corporation, CN=SecureTrust CA,
              subjectX500: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority,
              subjectX500: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA,
              subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC,
              subjectX500: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048),
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5,
              subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2,
              subjectX500: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority,
              subjectX500: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority,
              subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4,
              subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA,
              subjectX500: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root,
              subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA,
              Searching for one of the following substrings in the subjectX500...
              stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov,
              stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov",
              ----
              subjectX500: C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority,
              subjectX500: O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.,
              subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.",
              subjectX500: L=Internet, O="VeriSign, Inc.", OU=VeriSign Commercial Software Publishers CA,
            --LocalMachineRootCertStore
          --cacheClientCerts
          clientHandshake2:
            Timeout waiting to read socket or accept connection
            timeoutMs: 60000
            Failed to read TLS record (2)
            tlsRec_msg: 2668
            msgLen: 6498
            buildClientKeyExchange:
              Cannot build ClientKeyExchange, missing server certificate.
            --buildClientKeyExchange
            Failed to build ClientKeyExchange
          --clientHandshake2
        --clientHandshake
        Client handshake failed. (1)
        connectionClosed: 0
      --convertToTls
      Failed to convert channel to SSL/TLS
    --authTls
    Failed to connect to FTP server.
    Failed.
  --Connect_Ftp2
--ChilkatLog
220-DMV Secure File Transfer


220-
220-
220 Secure FTP Server ready.
AUTH TLS
234 TLSv1
ChilkatLog:
  ChangeRemoteDir:
    DllDate: Mar 21 2014
    ChilkatVersion: 9.5.0.21
    UnlockPrefix: DMVCAGFTP
    Username: DOBS-TRANS01

Answer

Sorry about that, here is the condensed message. 

` clientHandshake2:
            Timeout waiting to read socket or accept connection
            timeoutMs: 60000
            Failed to read TLS record (2)
            tlsRec_msg: 2668
            msgLen: 6498
            buildClientKeyExchange:
              Cannot build ClientKeyExchange, missing server certificate.
            --buildClientKeyExchange
            Failed to build ClientKeyExchange
          --clientHandshake2
        --clientHandshake
        Client handshake failed. (1)
        connectionClosed: 0
      --convertToTls
      Failed to convert channel to SSL/TLS
    --authTls
    Failed to connect to FTP server.
    Failed.
  --Connect_Ftp2
--ChilkatLog
220-DMV Secure File Transfer

220-
220-
220 Secure FTP Server ready.
AUTH TLS
234 TLSv1
ChilkatLog:
  ChangeRemoteDir:
    DllDate: Mar 21 2014
    ChilkatVersion: 9.5.0.21
    UnlockPrefix: DMVCAGFTP
    Username: DOBS-TRANS01`

Answer

First thing I notice is you are using an old-ish version of the Chilkat library. I'd try again with the latest version just in case there's a bug that's been fixed.

Also, if you put your error text in <pre></pre> tags, then they will be easier to read.

Answer

I cannot use the new version, for loading certificates, it either has a bug or my code is buggy. Is there a bug list anywhere, that I could match the problem to the fix ?