Connecting to FTPS

327 views
Skip to first unread message

Marc Lang

unread,
Aug 16, 2012, 3:36:56 AM8/16/12
to InterSystems: Ensemble in Healthcare
Hi,

I created a new FTP server in FileZilla Server.
It allows both plain FTP and implicit FTP over SSL/TLS (FTPS)

I used the "generate new certificate" feature to generate a CRT file on the FTP server.

When I connect with an FTP Client, I am asked to accept the certificate, and it just works fine.
Can see from the logs it's connecting on port 990.

When I try to use an FTP Adapter in Ensemble I can't get it working.
Have set up credentials. Have also set up a "SSL/TLS configuration" in Ensemble (wasn't sure what to put in here?!)
Set the FTP Port as 990.

I get the warning in the log:
ERROR <Ens>ErrOutConnectExpired: FTP Connect timeout period (5) expired for SCGCENSDEV:990/ensemble-ftp/SSL='FTPS + ERROR <Ens>ErrFTPConnectFailed: FTP: Failed to connect to server 'SCGCENSDEV:990/ensemble-ftp/SSL='FTPS/ensemble-ftp' (msg='Timeout waiting for response',code=529)


Any ideas?

Marc Lang

unread,
Aug 16, 2012, 3:45:43 AM8/16/12
to InterSystems: Ensemble in Healthcare
Should add - whenever I go into "New SSL/TLS Configuration" screen I get a javascript popup:

"ERROR: [object Error]"

This is even if I just enter a configuration name and hit "Save"

Using Ensemble 2010.2.3

rob.va...@cymax.nl

unread,
Oct 23, 2015, 5:02:08 AM10/23/15
to InterSystems: Ensemble in Healthcare, ensemble-in...@googlegroups.com
I had the same problem trying to connect to an FTP server over SSL/TLS with implicit encryption. Could find nothing in the documentation about it but I did find a little comment in the code of  EnsLib.FTP.Common.:

/// The name of an existing SSL/TLS system configuration set to use for FTPS (Secure Socket Layer / Transport Layer Security, configured via the system portal's Security Management page).
/// This is for FTPS, meaning an encrypted connection to a normal FTP server.
/// If you append an asterisk (*) to the configuration name you enter, this adapter will use legacy FTPS mode.  
/// FTPS is defined by RFC4217 but some servers operate with a non-compliant variant which simply assumes that the command channel should use TLS. 
/// Earlier versions of this adapter worked only with this sort of non-compliant server. Append an asterisk to the SSL configuration name if you need to (continue to) work with this sort of server.

After appending the asterisk the adapter worked flawlessly.

Op donderdag 16 augustus 2012 09:36:56 UTC+2 schreef Marc Lang:
Reply all
Reply to author
Forward
0 new messages