Certificate Error when connecting by FTP

[rednoise]

When I FTP to my profile by FTP, Filezilla throws up the error message, "The server's certificate is unknown. Please carefully examine the certificate to make sure the server can be trusted. Details - Valid from: 10/7/2019 8:00:00 PM, Valid to: 1/6/2020 6:59:59 PM - Certificate expired!; Hostname does not match certificate"

I assume this is a side-effect of the migration. Are the admins aware of this? Is there anything I should do to mitigate this?

 

[Anna]

Given that your message say that the hostname doesn't match the certificate, what are you using as host?

 

[rednoise]

Given that your message say that the hostname doesn't match the certificate, what are you using as host?

ftp.rednoise.x10host.com , which is what my original setup instructions specified, and what has been working for a long time. Is this not correct?

I may not have been clear - I can acknowledge the error and proceed with my FTP session, although the error message pops up again frequently, especially when I change directory.

 

[rednoise]

ftp.rednoise.x10host.com , which is what my original setup instructions specified, and what has been working for a long time. Is this not correct?

I may not have been clear - I can acknowledge the error and proceed with my FTP session, although the error message pops up again frequently, especially when I change directory.

As a test, I tried changing my hostname to rednoise.x10host.com . I can still FTP to my profile, but I still get the same error message about the expired certificate.

 

[Anna]

Only the server address itself will have a full certificate, in your case that would mean using x13.x10hosting.com as host, the individual domains that belong to users does not have ssl support.

 

[rednoise]

Only the server address itself will have a full certificate, in your case that would mean using x13.x10hosting.com as host, the individual domains that belong to users does not have ssl support.

OK, that makes some sense. My host name does not match the certificate. However, the other part of the error message mentions that this specific certificate expired on 1/6/2020 6:50:59 PM. Is that significant?

I have always had Filezilla use the setting "Use explicit FTP over TLS if available" and have never seen this error message. Has the migration changed something that triggered this? Does this mean that I should use insecure plain FTP?

 

[Anna]

The certificate for x13 should not be a cpanel issued one as cpanel is not in use, so it is odd that you get that as issuer, unless it is somehow cached for your domain since earlier.

The certificate that is present on the login page for DirectAdmin is issued by let's encrypt, which would logically be the same for ftp. What happens if you use x13.x10hosting.com as the host?

 

[butter14]

OK, that makes some sense. My host name does not match the certificate. However, the other part of the error message mentions that this specific certificate expired on 1/6/2020 6:50:59 PM. Is that significant?

I have always had Filezilla use the setting "Use explicit FTP over TLS if available" and have never seen this error message. Has the migration changed something that triggered this? Does this mean that I should use insecure plain FTP?

View attachment 9886

FTP over TLS never worked for me, it has always been the insecure plain FTP

 

[rednoise]

The certificate for x13 should not be a cpanel issued one as cpanel is not in use, so it is odd that you get that as issuer, unless it is somehow cached for your domain since earlier.

The certificate that is present on the login page for DirectAdmin is issued by let's encrypt, which would logically be the same for ftp. What happens if you use x13.x10hosting.com as the host?

Changing the host to x13.x10hosting.com works for me. When I first log on Filezilla presents me with this:



After I accept the certificate I can log on with no more errors and my user user ID forwards me to my profile. This is how most FTP servers I've used work.

Your solution works, but it contradicts the official setup instructions at https://x10hosting.com/support/guides/uploading-files . I hope that will be reconciled soon to avoid other people's confusion.

Thanks for your help.

 

[rednoise]

FTP over TLS never worked for me, it has always been the insecure plain FTP

Filezilla has been set to "Use explicit FTP over TLS if available," which I had assumed meant to try TLS first and if that didn't work, to fall back to plain FTP. I don't remember now noticing whether my TLS connection was accepted or not, but it is now:

Status: Resolving address of x13.x10hosting.com
Status: Connecting to 198.91.81.13:21...
Status: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Status: Logged in