使用lftp将文件从networking上的两台计算机上传到远程服务器。 使用完全相同的代码,这对一个工作正常,不工作另一个。 下面显示了问题会话和成功会话的成绩单。 我得到的错误是:
证书validation:证书通用名称与请求的主机名称不符
谷歌search这个错误find一个似乎适用于大多数人的解决scheme(使用: set ssl:verify-certificate no )。 但是,正如你在下面的成绩单中看到的,这对“问题电脑”来说不起作用。
因为这两台电脑使用相同的DNS和路由器上网,我只能假设这可能是由问题电脑上的不同设置引起的。 希望得到的东西来检查除了lftp设置以外的build议。
问题电脑
股票Debian系统jessie 8.7: 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1 (2016-12-30) x86_64 GNU/Linux
正在使用的lftp版本:
$ apt show lftp Package: lftp Version: 4.6.0-1+deb8u1 : :
失败的会话(主机名被replace为“example”):
$ lftp lftp :~> debug lftp :~> set set dns:order "inet6 inet" set file:charset UTF-8 set ftp:timezone "" set net:max-retries 2 set net:timeout 30 set ssl:verify-certificate no set xfer:log yes set xfer:log-file /tmp/lftp.log set xfer:max-log-size 1048576 set xfer:max-redirections 10 set xfer:verify-command /usr/share/lftp/verify-file lftp :~> open example.nl ---- using user `[email protected]' and password from ~/.netrc ---- Resolving host address... ---- 2 addresses found: (▮▮▮▮▮▮▮▮, ▮▮▮▮▮▮▮▮) lftp [email protected]@example.nl:~> dir ---- Connecting to example.nl (▮▮▮▮▮▮▮▮) port 21 **** connect(control_sock): Network is unreachable ---- Closing control socket ---- Connecting to example.nl (▮▮▮▮▮▮▮▮) port 21 <--- 220 ProFTPD 1.3.5b Server ready. ---> FEAT <--- 211-Features: <--- CCC <--- PBSZ <--- AUTH TLS <--- MFF modify;UNIX.group;UNIX.mode; <--- REST STREAM <--- MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*; <--- LANG en-US.UTF-8* <--- UTF8 <--- EPRT <--- EPSV <--- MDTM <--- SSCN <--- TVFS <--- MFMT <--- SIZE <--- PROT <--- 211 End ---> AUTH TLS <--- 234 AUTH TLS successful ---> LANG Certificate: OU=Domain Control Validated,OU=PositiveSSL Wildcard,CN=*.zxcs.nl Issued by: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO RSA Domain Validation Secure Server CA WARNING: Certificate verification: Not trusted WARNING: Certificate verification: certificate common name doesn't match requested host name 'example.nl' <--- 200 Using default language en_US.UTF-8 ---> OPTS UTF8 ON <--- 200 UTF8 set to on ---> OPTS MLST modify;perm;size;type;UNIX.group;UNIX.mode;UNIX.owner; <--- 200 OPTS MLST modify;perm;size;type;UNIX.group;UNIX.mode;UNIX.owner; ---> USER [email protected] <--- 331 Password required for [email protected] ---> PASS XXXX <--- 230 User [email protected] logged in ---> PWD <--- 257 "/" is the current directory ---> PBSZ 0 <--- 200 PBSZ 0 successful ---> PROT P <--- 200 Protection set to Private ---> PASV <--- 227 Entering Passive Mode (▮▮▮▮▮▮▮▮). ---- Connecting data socket to (▮▮▮▮▮▮▮▮) port 35302 ---- Data connection established ---> LIST <--- 150 Opening ASCII mode data connection for file list Certificate: OU=Domain Control Validated,OU=PositiveSSL Wildcard,CN=*.zxcs.nl Issued by: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO RSA Domain Validation Secure Server CA WARNING: Certificate verification: Not trusted WARNING: Certificate verification: certificate common name doesn't match requested host name ' example.nl' <--- 425 Unable to build data connection: Operation not permitted ---- Closing data socket <--- 450 LIST: Operation not permitted **** extra server response ls: Fatal error: max-retries exceeded lftp [email protected]@example.nl:/>
另一台电脑
基于Debian的Raspbian jessie 8.0: 4.4.38+ #938 Thu Dec 15 15:17:54 GMT 2016 armv6l GNU/Linux在这台电脑上,我拥有完全相同的lftp版本:
$ apt show lftp Package: lftp Version: 4.6.0-1+deb8u1 : :
但是现在lftp会话没有问题:
$ lftp lftp :~> debug lftp :~> set set dns:order "inet6 inet" set file:charset UTF-8 set ftp:timezone "" set net:max-retries 2 set net:timeout 30 set ssl:verify-certificate no set xfer:log yes set xfer:log-file /tmp/lftp.log set xfer:max-log-size 1048576 set xfer:max-redirections 10 set xfer:verify-command /usr/share/lftp/verify-file lftp :~> open example.nl ---- using user `[email protected]' and password from ~/.netrc ---- Resolving host address... ---- 2 addresses found: ▮▮▮▮▮▮▮▮, ▮▮▮▮▮▮▮▮ lftp [email protected]@example.nl:~> dir ---- Connecting to example.nl (▮▮▮▮▮▮▮▮) port 21 **** connect(control_sock): Network is unreachable ---- Closing control socket ---- Connecting to example.nl (▮▮▮▮▮▮▮▮) port 21 <--- 220 ProFTPD 1.3.5b Server ready. ---> FEAT <--- 211-Features: <--- CCC <--- PBSZ <--- AUTH TLS <--- MFF modify;UNIX.group;UNIX.mode; <--- REST STREAM <--- MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*; <--- LANG en-US.UTF-8* <--- UTF8 <--- EPRT <--- EPSV <--- MDTM <--- SSCN <--- TVFS <--- MFMT <--- SIZE <--- PROT <--- 211 End ---> AUTH TLS <--- 234 AUTH TLS successful ---> LANG Certificate: OU=Domain Control Validated,OU=PositiveSSL Wildcard,CN=*.zxcs.nl Issued by: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO RSA Domain Validation Secure Server CA WARNING: Certificate verification: Not trusted WARNING: Certificate verification: certificate common name doesn't match requested host name 'example.nl' <--- 200 Using default language en_US.UTF-8 ---> OPTS UTF8 ON <--- 200 UTF8 set to on ---> OPTS MLST modify;perm;size;type;UNIX.group;UNIX.mode;UNIX.owner; <--- 200 OPTS MLST modify;perm;size;type;UNIX.group;UNIX.mode;UNIX.owner; ---> USER [email protected] <--- 331 Password required for [email protected] ---> PASS XXXX <--- 230 User [email protected] logged in ---> PWD <--- 257 "/" is the current directory ---> PBSZ 0 <--- 200 PBSZ 0 successful ---> PROT P <--- 200 Protection set to Private ---> PASV <--- 227 Entering Passive Mode (▮▮▮▮▮▮▮▮). ---- Connecting data socket to (▮▮▮▮▮▮▮▮) port 35035 ---- Data connection established ---> LIST <--- 150 Opening ASCII mode data connection for file list Certificate: OU=Domain Control Validated,OU=PositiveSSL Wildcard,CN=*.zxcs.nl Issued by: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO RSA Domain Validation Secure Server CA WARNING: Certificate verification: Not trusted WARNING: Certificate verification: certificate common name doesn't match requested host name 'example.nl' ---- Got EOF on data connection ---- Closing data socket drwxr-xr-x 11 ftp ftp 4096 Feb 11 16:56 . drwxr-xr-x 11 ftp ftp 4096 Feb 11 16:56 .. drwxr-xr-x 2 ftp ftp 4096 Dec 29 10:48 01.home lftp [email protected]@example.nl:/>