Issue Unable to access the remote backup storage using SFTP

[Endre]

Server operating system version

Debian 11.7

Plesk version and microupdate number

Plesk Obsidian 18.0.52 Update #2

Hello,

I am stuck with this error when I try to set up remote backup location:

Error: Unable to access the storage: Transport error: unable to list directory: Curl error: (56) Failure when receiving data from the peer: Last FTP request: PASS ***** Last FTP response: 331 Please specify the password
Make sure you have entered the correct storage settings. You can check them independently with the command:
curl -v --ftp-pasv --ssl -k -u myusername 'ftp://80.211.121.102/debcz1/'

The FTP server IP, username and password are all correct. I can login to the FTP server using filezilla SFTP on my desktop or using the below command on ssh from the plesk server:
sftp [email protected]

Below is the output of the curl command on the plesk server:

curl -v --ftp-pasv --ssl -k -u myusername 'ftp://80.211.121.102/debcz1/'
Enter host password for user 'myusername': ********************

* Trying 80.211.121.102:21...
* Connected to 80.211.121.102 (80.211.121.102) port 21 (#0)
< 220 (vsFTPd 3.0.3)
> AUTH SSL
< 234 Proceed with negotiation.
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
* CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Request CERT (13):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* Server certificate:
* subject: C=HU; ST=Budapest; L=Budapest; O=mycompany; CN=cz1bkp.bvfheating.net; emailAddress=[email protected]
* start date: May 9 10:30:28 2023 GMT
* expire date: May 8 10:30:28 2024 GMT
* issuer: C=HU; ST=Budapest; L=Budapest; O=mycompany; CN=cz1bkp.bvfheating.net; emailAddress=[email protected]
* SSL certificate verify result: self signed certificate (18), continuing anyway.
> USER myusername
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
< 331 Please specify the password.
> PASS ********************
* TLSv1.3 (OUT), TLS alert, protocol version (582):
* OpenSSL SSL_read: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, errno 0
* Closing connection 0
curl: (56) OpenSSL SSL_read: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, errno 0

Output of the curl command on the ftp server:

curl -v --ftp-pasv --ssl -k -u myusername 'ftp://80.211.121.102/debcz1/'
Enter host password for user 'myusername': ********************

* Trying 80.211.121.102:21...
* Connected to 80.211.121.102 (80.211.121.102) port 21 (#0)
< 220 (vsFTPd 3.0.3)
> AUTH SSL
< 234 Proceed with negotiation.
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
* CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Request CERT (13):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* Server certificate:
* subject: C=HU; ST=Budapest; L=Budapest; O=mycompany; CN=cz1bkp.bvfheating.net; emailAddress=[email protected]
* start date: May 9 10:30:28 2023 GMT
* expire date: May 8 10:30:28 2024 GMT
* issuer: C=HU; ST=Budapest; L=Budapest; O=mycompany; CN=cz1bkp.bvfheating.net; emailAddress=[email protected]
* SSL certificate verify result: self signed certificate (18), continuing anyway.
> USER myusername
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
< 331 Please specify the password.
> PASS ********************
* TLSv1.3 (OUT), TLS alert, protocol version (582):
* OpenSSL SSL_read: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, errno 0
* Closing connection 0
curl: (56) OpenSSL SSL_read: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, errno 0

Could you please help me what I am doing wrong or what configuration do I have to make on the FTP or the Plesk server I would be more than happy indeed.

Thank you!

 

[Peter Debik]

For SFTP you need the SFTP backups extension or the Cloud Backups Pro extension which includes the SFTP backups extension. Are you using these or just the built-in FTP/FTPS backup?

 

[Kaspar]

@Endre just to clear any confusion, are trying to use your Plesk server to store backups as remote location? Or are you trying to store data from your Plesk server on a remote location elsewhere?

 

[Endre]

For SFTP you need the SFTP backups extension or the Cloud Backups Pro extension which includes the SFTP backups extension. Are you using these or just the built-in FTP/FTPS backup?

Ahhhhh... I thought FTPS means SFTP
Sorry, my bad. checking out the SFTP backups extension right now.
Thank you!

 

[Endre]

@Endre just to clear any confusion, are trying to use your Plesk server to store backups as remote location? Or are you trying to store data from your Plesk server on a remote location elsewhere?

I have a different VPS (located in another datacenter) running only vsFTPd on debian.

 

[Peter Debik]

Ahhhhh... I thought FTPS means SFTP
Sorry, my bad. checking out the SFTP backups extension right now.
Thank you!

SFTP = SSH connection with FTP on top, port 22 (SSH port)
FTPS = FTP connection with SSL/TLS, port 21 (FTP port)

 

[Endre]

SFTP = SSH connection with FTP on top, port 22 (SSH port)
FTPS = FTP connection with SSL/TLS, port 21 (FTP port)

Thank you, Peter.
I have read this article and now I am a bit more confused if SFTP was a good choice.
However I have purchased the SFTP backups license already, so I give it a try for one year.