On Wed, 8 Dec 2004, Jeffrey Paul wrote:

>> LIST
> < 150 Opening ASCII mode data connection for file list
> * Doing the SSL/TLS handshake on the data stream
> * successfully set certificate verify locations:
> * CAfile: /usr/share/curl/curl-ca-bundle.crt
> CApath: none
> * SSL re-using session ID
> * SSL: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version

...

> Any ideas as to what could be going wrong?

I think the remote is either not using SSL for the data connection or it
somehow uses a version that confuses OpenSSL's SSLv3 code.

> Listing, uploading, and downloading all work fine in the Glub Tech client.
> Unfortunately, this is all SSL/TLS, so I can't sniff the connection and find
> out where it's going wrong

Have you tried? Have you verified that the data connection really is
encrypted?

> (unless any of you know an SSL/TLS man-in-the-middle tool, as the cert of
> the server we're connecting to isn't in our bundle - hence the
> "--insecure").

ssldump is *a* tool, but I don't know if it fits here.

-- 
      Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se
       Dedicated custom curl help for hire: http://haxx.se/curl.html