cURL / Mailing Lists / curl-users / Single Mail

curl-users

RE: gnutls_handshake() failed: -8

From: Dorr, Brad <Brad.Dorr_at_phns.com>
Date: Thu, 26 Jan 2006 21:30:51 -0500

Dan,

I am new to curl so maybe I just have the syntax wrong. I want to retrieve a file from the spot where the login drops me when I connect to their site is this syntax correct. it doesn't retrieve any files.

curl --ftp-ssl -1 -S --trace-ascii curltrace.trc --cacert /opt/TWWfsw/curl715/share/verisign4_b64_all.pem --cert-type PEM -vu DCH00YU:gu83u8usd01l ftp://136.181.135.38:11250

the port I need is 11250.

Thanks,
Brad.

-----Original Message-----
From: curl-users-bounces_at_cool.haxx.se
[mailto:curl-users-bounces_at_cool.haxx.se]On Behalf Of Dan Fandrich
Sent: Wednesday, January 25, 2006 3:13 PM
To: curl-users_at_cool.haxx.se
Subject: Re: gnutls_handshake() failed: -8

On Wed, Jan 25, 2006 at 02:55:04PM -0500, Dorr, Brad wrote:
> We are running on AIX 5.2 Unix platform. I have install curl successfully, but I cannot get a connection to a vendors site. I am trying to get a SSL FTP connection. Below is the curl command I ran and the results. Can you help with the handshake error that I am getting. I have run out of options. Is there something the certificate which I got from the vendor or something else going on? Any direction or help would be great. I did get curl to work connecting to another Unix server via ftp so I know curl works ok.

What version of curl?

> Thanks,
> Brad Dorr.
> # curl --cert-type PEM --cacert /opt/TWWfsw/curl715/share/veriroot_b64_cnvrt.pem -vu DCH00YU:PHNSrock ftps://136.181.135.38:11250

Great password. I hope you don't use it for anything but your cert.

> * About to connect() to 136.181.135.38 port 11250
> * Trying 136.181.135.38... connected
> * Connected to 136.181.135.38 (136.181.135.38) port 11250
> * found 1 certificates in /opt/TWWfsw/curl715/share/veriroot_b64_cnvrt.pem
> * gnutls_handshake() failed: -8
> * Closing connection #0

You don't want ftps: here. That will encrypt the control channel, which this
server doesn't want. You want a plain ftp: URL here and the --ftp-ssl option
to negotiate SSL in the ftp session.

> Segmentation fault(coredump)

This is always bad. Can you run this under a debugger and see where it fails?

>>> Dan

-- 
http://www.MoveAnnouncer.com              The web change of address service
          Let webmasters know that your web site has moved
-----------------------------------------
Disclaimer:
This electronic message, including any attachments, is confidential
and intended solely for use of the intended recipient(s). This
message may contain information that is privileged or otherwise
protected from disclosure by applicable law. Any unauthorized
disclosure, dissemination, use or reproduction is strictly
prohibited. If you have received this message in error, please
delete it and notify the sender immediately.
Received on 2006-01-27