FTPS on plesk 12 windows doesn't work

[WagnerS]

Hi again,

Well, FTPS is not working after upgrade from plesk 11. On plesk 11 windows and linux worked fine, after upgrade my windows server, it stopped working.

PS C:\Windows\system32> & "C:\Program Files (x86)\Parallels\Plesk\admin\bin\pmm-ras.exe" --check-repository --dump-storage=ftps://****:****@***.***.***.***:21 --debug --verbose
[2014-11-11 21:16:12.981| 4688] INFO: pmm-ras started : "C:\Program Files (x86)\Parallels\Plesk\admin\bin\pmm-ras.exe" --check-repository "--dump-storage=ftps://****:****@***.***.***.***:21" --debug --verbose
[2014-11-11 21:16:12.997| 4688] INFO: Repository 'ftps://***.***.***.***:21': Initializing...
[2014-11-11 21:16:12.997| 4688] INFO: Transport: Get repository transport ftps://***.***.***.***:21
[2014-11-11 21:16:13.013| 4688] INFO: Transport: Init credentials for user '****'
[2014-11-11 21:16:13.013| 4688] INFO: Repository 'ftps://***.***.***.***:21': Initialized
[2014-11-11 21:16:13.028| 4688] INFO: Transport: List dir /
[2014-11-11 21:16:13.028| 4688] INFO: Ftp init url ftps://***.***.***.***:21/
[2014-11-11 21:16:13.028| 4688] INFO: Created temp file: C:\Program Files (x86)\Parallels\Plesk\PrivateTemp/repo_transport_tmp_01cffe057c45e240
[2014-11-11 21:16:13.044| 4688] INFO: Ftp extended list dir
[2014-11-11 21:16:16.013| 4688] INFO: Curl output :
[2014-11-11 21:16:16.013| 4688] INFO: * Hostname was NOT found in DNS cache
[2014-11-11 21:16:16.013| 4688] INFO: *   Trying ***.***.***.***...
[2014-11-11 21:16:16.028| 4688] INFO: * Connected to ***.***.***.*** (***.***.***.***) port 21 (#0)
[2014-11-11 21:16:16.028| 4688] INFO: < 220 ProFTPD 1.3.5rc3 Server (Debian) [::ffff:***.***.***.***]
[2014-11-11 21:16:16.028| 4688] INFO: > AUTH SSL
[2014-11-11 21:16:16.028| 4688] INFO: < 234 AUTH SSL successful
[2014-11-11 21:16:16.044| 4688] INFO: * SSL connection using TLSv1.2 / DHE-RSA-AES256-GCM-SHA384
[2014-11-11 21:16:16.044| 4688] INFO: * Server certificate:
[2014-11-11 21:16:16.044| 4688] INFO: *          subject: description=***; C=**; ST=**; L=**; O=**;CN=*.*.*; emailAddress=*@*.*
[2014-11-11 21:16:16.059| 4688] INFO: *          start date: 2013-04-16 09:42:22 GMT
[2014-11-11 21:16:16.059| 4688] INFO: *          expire date: 2015-04-16 16:23:19 GMT
[2014-11-11 21:16:16.059| 4688] INFO: *          issuer: C=IL; O=StartCom Ltd.; OU=Secure Digital Certificate Signing; CN=StartCom Class 2 Primary Intermediate Server CA
[2014-11-11 21:16:16.075| 4688] INFO: *          SSL certificate verify result: self signed certificate in certificate chain (19), continuing anyway.
[2014-11-11 21:16:16.075| 4688] INFO: > USER ****
[2014-11-11 21:16:16.091| 4688] INFO: < 331 Password required for ****
[2014-11-11 21:16:16.091| 4688] INFO: < 530 Login incorrect.
[2014-11-11 21:16:16.091| 4688] INFO: * Access denied: 530
[2014-11-11 21:16:16.091| 4688] INFO: * Closing connection 0
[2014-11-11 21:16:16.091| 4688] INFO:
[2014-11-11 21:16:16.091| 4688] INFO: Curl error (67) : Login denied
[2014-11-11 21:16:16.122| 4688] INFO: CurlError[544d0c19-2f10-4853-95a3-750dbcd481bf]: Curl error: Login denied [..\..\..\..\..\common\plesk-utils\PMM\repository-transport\ftp.cpp:559]
plesk::tFtpConnection::ListEx
Transport error: unable to list directory: Curl error: Login denied
[2014-11-11 21:16:16.138| 4688] INFO: pmm-ras finished. Exit code: 121

 

[UFHH01]

[2014-11-11 21:16:16.091| 4688] INFO: * Access denied: 530

Please correct the username or/and the password you are using, because the access to your Backup FTP server is denied.

 

[WagnerS]

username and password are correct. it works in FTP(not FTPS) and worked on plesk 11!

 

[UFHH01]

Could you please check the backup.log, to see if there are more information about the error? There might be errors during the handshake, which you will only see in debug modus.

As well, it could be usefull to update your cURL - library manually ( latest release was on the 5th nov. 2014 - curl 7.39.0 - http://curl.haxx.se/download.html ), because since the Poodle vulnerability there have been a lot of changes lately - the openssl standards have also been changed.

 

[WagnerS]

where's backup.log on windows? as you can see, I ran from command line. I'll try to update windows curl

 

[UFHH01]

Parallels Plesk Panel for Windows service logs and configuration files ( KB - article: 111 289 )​

 

[WagnerS]

Thanks for your help. I saw that KB article before, none of "backup manager" logs shows anything relevant. Do you know how could I turn on "debug modus"?

 

[WagnerS]

Also, I just installed latest curl msi. But the error is the same. I don't know if plesk(pmm-ras.exe) got curl library(DLL) from the place MSI installed. I'm more from the linux side so I really need help on that too.

 

[UFHH01]

Please use the string "--help" after you use "pmm-ras.exe" - this will display the possible options / additional strings you can use with this application - as this is possible with most applications. The string "--debug" for example will give you the option, to show a more detailed log.

 

[WagnerS]

As you can see on my first post on this thead, my command line already had --debug flag. But it displayed everything on console, nothing on logs that I can find.

I have hope that this bug will be corrected SOON(or workaround is available) or I'm unable to backup anything. I have some others plesk 11 servers(with backup working to the same FTP server) and I'll not upgrade none more of them before I'm able to backup from this "guinea pig" server.

FTP only without SSL/TLS is not an options. I'll not transfer plain text username/password over the internet. As a unacceptable workaround, I made a bacula script that stop every service, make a LVM snapshot and start everything again. Than, I backup the snapshot and remove it after. Not the best solution but is what I can do with the cards I have.

This is a critical situation for me and plesk simply didn't answer the forum for me.

 

[WagnerS]

any clue?

 

[UFHH01]

I have an idea, but I'm not sure, if I'm right here...

Depending on your OS and Plesk version, you should have some encrypted PHP - files from Plesk as well... in your case it might be, that one of these files still has some cURL definitions to force using the SSLv3 - protocol, instead of leaving the handshake by the server and client, based on the existent allowed protocols from the server.

Here is what I would do:
I would fill in a bug - report and request free assistance over the support - sites from Parallels, referring to this thread as well, so you don't have to explain the whole issue/problem again. If the bug is confirmed by Parallels, then they will try as soon as possible to solve that issue.

 

[WagnerS]

Thank you very much UFHH01

 

[WagnerS]

any news on the bug report, UFHH01?

 

[UFHH01]

Sorry WagnerS,

you might have misunderstood me here. I suggested that YOU could do the above steps to continue.

 

[WagnerS]

I didn't find a place to report a bug without paying.

 

[IgorG]

I didn't find a place to report a bug without paying.

You can contact Parallels Support Team and if supporters confirm that it is really bug - you will be refunded for request.

 

[WagnerS]

I payed for the support, ticket #1977311.... I have sure plesk 12 has a bug on FTPS backup settings.

I'm having a hard time with support quality at this moment. They just earn time. Could you PLEASE get some senior on my ticket?

 

[IgorG]

I have escalated this ticket. I hope it will be processed soon.

 

[WagnerS]

thank you very much.