Help with TLS

[asomers]

As a new libunftp user, I'm trying to get TLS working for the first time, without success. I don't know if the problem is with my code, with my client, or in how I generate my certificates. Could you please help?

This is my server code:

use unftp_sbe_fs::ServerExt;
use libunftp::options::{FtpsRequired, TlsFlags};
use sloggers::Build;

#[tokio::main]
pub async fn main() {
    pretty_env_logger::init();

    let addr = "127.0.0.1:2121";
    let logger = sloggers::terminal::TerminalLoggerBuilder::new()
        .level(sloggers::types::Severity::Debug)
        .destination(sloggers::terminal::Destination::Stderr)
        .build()
        .unwrap();
    let server = libunftp::Server::with_fs(std::env::temp_dir())
        .ftps("/path/to/cert.csr", "/path/to/key.pem")
        .ftps_required(FtpsRequired::None, FtpsRequired::All)
        .ftps_tls_flags(TlsFlags::V1_2 | TlsFlags::V1_3 | TlsFlags::RESUMPTION_SESS_ID | TlsFlags::RESUMPTION_TICKETS)
        .logger(logger);

    println!("Starting ftp server on {}", addr);
    server.listen(addr).await.unwrap();
}

This is the command I use to generate certificates:

openssl req -new > cert.csr
openssl rsa -in privkey.pem -out key.pem
openssl x509 -in cert.csr -out cert.pem -req -signkey key.pem -days 1001
cat key.pem>>cert.pem

This is how I invoke my client:

> curl --verbose ftps://localhost:2121/empty.txt
* processing: ftps://localhost:2121/empty.txt
*   Trying [::1]:2121...
* connect to ::1 port 2121 failed: Connection refused
*   Trying 127.0.0.1:2121...
* Connected to localhost (127.0.0.1) port 2121
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /usr/local/share/certs/ca-root-nss.crt
*  CApath: none
* OpenSSL/3.0.9: error:0A00010B:SSL routines::wrong version number
* Closing connection
curl: (35) OpenSSL/3.0.9: error:0A00010B:SSL routines::wrong version number

And this is what the server logs:

Aug 22 21:20:20.323 INFO Incoming control connection from 127.0.0.1:23410, module: libunftp::server::ftpserver::listen:44
Aug 22 21:20:20.323 INFO Starting control loop, source: 127.0.0.1:23410, trace-id: 0xdc9c8ab4b4b36ac2, module: libunftp::server::controlchan::control_loop:182
Aug 22 21:20:20.325 WARN Control channel error: ControlChanError { kind: Utf8Error, source: Some(ParseError { kind: InvalidUtf8 }) }, source: 127.0.0.1:23410, trace-id: 0xdc9c8ab4b4b36ac2, module: libunftp::server::controlchan::control_loop:300

[asomers]

SOLVED

There were two problems:

• Curl doesn't work as a client with libunftp. I don't know if this is a bug in libunftp or curl, but switching to FileZilla fixed it.
• libunftp didn't like the way that I generated my certificates. Generating them according to the instructions at https://unftp.rs/server/ftps fixed the problem.