Question:
Using Ftp2 for a .net desktop application, getting this error,
ChilkatLog: SetSslClientCert: DllDate: Mar 21 2014 ChilkatVersion: 9.5.0.21 UnlockPrefix: DMVCAGFTP Username: DOBS-TRANS01:jvondriska Architecture: Little Endian; 32-bit Language: .NET 2.0 VerboseLogging: 1 hasPrivateKey: hasKey: 1 --hasPrivateKey The certificate has an associated private key. The private key is exportable. --SetSslClientCert Success. --ChilkatLog ChilkatLog: Connect_Ftp2: DllDate: Mar 21 2014 ChilkatVersion: 9.5.0.21 UnlockPrefix: DMVCAGFTP Username: DOBS-TRANS01:jvondriska Architecture: Little Endian; 32-bit Language: .NET 2.0 VerboseLogging: 1 ProgressMonitoring: enabled: yes heartbeatMs: 0 sendBufferSize: 65536 --ProgressMonitoring ImplicitSsl: 0 AuthTls: 1 AuthSsl: 1 Hostname: sft.dmv.ca.gov Port: 2121 IdleTimeoutMs: 60000 ConnectTimeout: 20000 connect2: hostname: sft.dmv.ca.gov port: 2121 ssl: 0 connectSocket: domainOrIpAddress: sft.dmv.ca.gov port: 2121 connectTimeoutMs: 20000000 connect_ipv6_or_ipv4: Multi-threaded domain to IP address resolution AddrInfoList: AddrInfo: ai_flags: 0 ai_family: 2 ai_socktype: 0 ai_protocol: 0 ai_addrlen: 16 ai_canonname: (NULL) --AddrInfo --AddrInfoList connecting to IPV4 address... ipAddress: 205.225.192.110 connect: Waiting for the connect to complete... myIP: 10.242.2.72 myPort: 49510 socket connect successful. --connect --connect_ipv6_or_ipv4 --connectSocket --connect2 Turning on TCP_NODELAY. socketOptions: SO_SNDBUF: 8192 SO_RCVBUF: 8192 TCP_NODELAY: 1 --socketOptions readCommandResponse: replyLineQP: 220-DMV Secure File Transfer replyLineQP: 220- replyLineQP: 220- replyLineQP: 220 Secure FTP Server ready. commandResponse: 220-DMV Secure File Transfer 220- 220- 220 Secure FTP Server ready. statusCode: 220 readResponse: Elapsed time: 234 millisec --readCommandResponse initialStatus: 220 initialResponse: 220-DMV Secure File Transfer 220- 220- 220 Secure FTP Server ready. converting to secure connection... authTls: sendCommand: sendingCommand: AUTH TLS --sendCommand readCommandResponse: replyLineQP: 234 TLSv1 commandResponse: 234 TLSv1 statusCode: 234 readResponse: Elapsed time: 32 millisec --readCommandResponse ssl_protocol: 0 convertToTls: clientHandshake: cacheClientCerts: Found cert with private key. CurrentUserMyCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: C=US, S=California, L=Sacramento, O=State of California - DMV, OU=DMV (Script Generated), CN=mvxcnusd-x509, Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- --CurrentUserMyCertStore LocalMachineMyCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: , --LocalMachineMyCertStore CurrentUserCaCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4, subjectX500: DC=com, DC=microsoft, DC=corp, DC=redmond, CN=MSIT Machine Auth CA 2, subjectX500: DC=gov, DC=va, OU=Services, OU=PKI, CN=Veterans Affairs Device CA B2, subjectX500: C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority, subjectX500: C=US, O="GeoTrust, Inc.", CN=RapidSSL CA, subjectX500: C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA, subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High-Assurance Secure Server CA, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA - G3, subjectX500: CN=Microsoft Internet Authority, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2, subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DoD Root CA 2, subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DOD EMAIL CA-31, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)06, CN=VeriSign Class 3 Extended Validation SSL SGC CA, subjectX500: C=US, O=U.S. Government, OU=DoD, OU=PKI, CN=DOD EMAIL CA-30, subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware, subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2, subjectX500: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA, subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA, subjectX500: C=US, O=GeoTrust Inc., CN=RapidSSL SHA256 CA - G3, subjectX500: C=US, O=Betrusted US Inc, OU=SSP, OU=Betrusted Production SSP CA A1, CN=Betrusted Production SSP CA A1, subjectX500: CN=Root Agency, subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign, subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA, subjectX500: DC=us, DC=ca, DC=k12, DC=cnusd, CN=Corona-Norco Unified School District Issuing CA, Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Windows Hardware Compatibility Intermediate CA, OU=Microsoft Corporation, CN=Microsoft Windows Hardware Compatibility, --CurrentUserCaCertStore LocalMachineCaCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: CN=Root Agency, subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign, subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA, subjectX500: DC=us, DC=ca, DC=k12, DC=cnusd, CN=Corona-Norco Unified School District Issuing CA, Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Windows Hardware Compatibility Intermediate CA, OU=Microsoft Corporation, CN=Microsoft Windows Hardware Compatibility, --LocalMachineCaCertStore CurrentUserRootCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority, subjectX500: C=ZA, S=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA, subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010, subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3, subjectX500: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA, subjectX500: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root, subjectX500: C=US, O=Equifax, OU=Equifax Secure Certificate Authority, subjectX500: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2, subjectX500: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority, subjectX500: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA, subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority, subjectX500: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA, subjectX500: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority, subjectX500: C=US, O=GTE Corporation, OU="GTE CyberTrust Solutions, Inc.", CN=GTE CyberTrust Global Root, subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA, subjectX500: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011, subjectX500: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2009 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - G2, subjectX500: C=US, O=SecureTrust Corporation, CN=SecureTrust CA, subjectX500: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority, subjectX500: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA, subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC, subjectX500: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048), subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5, subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2, subjectX500: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority, subjectX500: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA, subjectX500: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root, subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA, Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority, subjectX500: O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp., subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.", subjectX500: L=Internet, O="VeriSign, Inc.", OU=VeriSign Commercial Software Publishers CA, --CurrentUserRootCertStore LocalMachineRootCertStore: Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority, subjectX500: C=ZA, S=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA, subjectX500: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010, subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3, subjectX500: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA, subjectX500: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root, subjectX500: C=US, O=Equifax, OU=Equifax Secure Certificate Authority, subjectX500: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2, subjectX500: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority, subjectX500: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA, subjectX500: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority, subjectX500: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA, subjectX500: C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority, subjectX500: C=US, O=GTE Corporation, OU="GTE CyberTrust Solutions, Inc.", CN=GTE CyberTrust Global Root, subjectX500: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA, subjectX500: C=US, O=U.S. Government, OU=FPKI, CN=Federal Common Policy CA, subjectX500: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011, subjectX500: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2009 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - G2, subjectX500: C=US, O=SecureTrust Corporation, CN=SecureTrust CA, subjectX500: C=US, O="VeriSign, Inc.", OU=Class 3 Public Primary Certification Authority, subjectX500: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA, subjectX500: C=US, S=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC, subjectX500: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048), subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5, subjectX500: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2, subjectX500: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority, subjectX500: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority, subjectX500: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4, subjectX500: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA, subjectX500: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root, subjectX500: C=US, O=CNUSD, CN=Corona-Norco Unified School District Root CA, Searching for one of the following substrings in the subjectX500... stringToFind1: CN=dmvsftpbe1.sft.dmv.ca.gov, stringToFind2: CN="dmvsftpbe1.sft.dmv.ca.gov", ---- subjectX500: C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority, subjectX500: O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp., subjectX500: O=VeriSign Trust Network, OU="VeriSign, Inc.", OU=VeriSign Time Stamping Service Root, OU="NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.", subjectX500: L=Internet, O="VeriSign, Inc.", OU=VeriSign Commercial Software Publishers CA, --LocalMachineRootCertStore --cacheClientCerts clientHandshake2: Timeout waiting to read socket or accept connection timeoutMs: 60000 Failed to read TLS record (2) tlsRec_msg: 2668 msgLen: 6498 buildClientKeyExchange: Cannot build ClientKeyExchange, missing server certificate. --buildClientKeyExchange Failed to build ClientKeyExchange --clientHandshake2 --clientHandshake Client handshake failed. (1) connectionClosed: 0 --convertToTls Failed to convert channel to SSL/TLS --authTls Failed to connect to FTP server. Failed. --Connect_Ftp2 --ChilkatLog 220-DMV Secure File Transfer220- 220- 220 Secure FTP Server ready. AUTH TLS 234 TLSv1 ChilkatLog: ChangeRemoteDir: DllDate: Mar 21 2014 ChilkatVersion: 9.5.0.21 UnlockPrefix: DMVCAGFTP Username: DOBS-TRANS01
Sorry about that, here is the condensed message.
` clientHandshake2: Timeout waiting to read socket or accept connection timeoutMs: 60000 Failed to read TLS record (2) tlsRec_msg: 2668 msgLen: 6498 buildClientKeyExchange: Cannot build ClientKeyExchange, missing server certificate. --buildClientKeyExchange Failed to build ClientKeyExchange --clientHandshake2 --clientHandshake Client handshake failed. (1) connectionClosed: 0 --convertToTls Failed to convert channel to SSL/TLS --authTls Failed to connect to FTP server. Failed. --Connect_Ftp2 --ChilkatLog 220-DMV Secure File Transfer 220- 220- 220 Secure FTP Server ready. AUTH TLS 234 TLSv1 ChilkatLog: ChangeRemoteDir: DllDate: Mar 21 2014 ChilkatVersion: 9.5.0.21 UnlockPrefix: DMVCAGFTP Username: DOBS-TRANS01`
First thing I notice is you are using an old-ish version of the Chilkat library. I'd try again with the latest version just in case there's a bug that's been fixed.
Also, if you put your error text in <pre></pre> tags, then they will be easier to read.
I cannot use the new version, for loading certificates, it either has a bug or my code is buggy. Is there a bug list anywhere, that I could match the problem to the fix ?