Our Products:   CompleteFTP  edtFTPnet/Free  edtFTPnet/PRO  edtFTPj/Free  edtFTPj/PRO
0 votes
97 views
in Java FTP by (160 points)
I'm getting a certificate validation failure when trying to connect to an ftp server using ftps. I did a listing of the certificate with keytool and see Owner: CN=edxuat.xxx.com but the machine that I'm trying to connect to is ftps-edxuat.xxx.com. The SubjectAlternativeName list of the certificate does have ftps-edxuat.xxx.com in it and I have added ftps-edxuat.xxx.com to the ServerCommonNames list. Does the owner value of the certificate have to be the machine name that I'm trying to connect to?
by (44.4k points)
Which product are you referring to?  Is it our .NET product, edtFTPnet/PRO?
by (160 points)
The product is edtFTPj/PRO
by (153k points)
Please enable debug logging and post the *relevant snippet* here.
by (160 points)
com.enterprisedt.net.ftp.ssl.SSLFTPException: The CN (Common Name), edxuat.x.com, on the server's certificate does not match its hostname, ftps-edxuat.x.com

Thanks for reminding me to look in the log.

The guy that runs the ftp server and gave me the certificate says that since the certificate has ftps-edxuat.x.com listed in the SubjectAlternativeName list it should still be validated. Does the edtFTPj/PRO library use the SubjectAlternativeName list?
by (153k points)
I think you can create an instance of SSLFTPStandardValidator supplying edxuat.x.com, set it in SSLFTPClient, and it should work.

Please log in or register to answer this question.

Categories

...