Internal error at handshake state SSL_HT_FINISHED or SSL_HS_

Question

Hi everybody,

I

Answer 1

Could you send us the log file (see the Developer's Manual) to support at enterprisedt dot com? Set the debug level to ALL.

Answer 2

First thanks a lot. In the new versions we can connect to the server.

We bought now the sourcecorde lisense, because the support was perfect.

But one problem exist.
I

Answer 3

Interesting. It looks like the server is sending an alert for some reason.

Can you email us the log file with level set to ALL? That will tell us a lot more.

As a work around in the meantime, disconnecting and re-logging in after large transfers should at least get you going.

Answer 4

The solution we have suggested is reported to work so far. I'll post it here so others can reference:

The fact that the alert happened during the data-channel handshake and only after a long transfer makes me think that it might have something to do with the SSL session resumption timeout. SSL session resumption is a time-saving measure that allows the client and server to perform an abbreviated SSL handshake if they have previously completed a handshake. Session resumptions must occur within a specific period of the previous session being established. The handshake is meant to be able to fall back to full handshakes if the session resumption timeout has been passed, but it might be that something goes wrong at that point.

Session resumption is of very limited use unless lots of tiny files are being transferred. Our software enables session resumption by default, but they can be disabled by the configuration flag, DISABLE_SESSION_RESUMPTION. You can use it like this:

    ftpClient.setConfigFlags(SSLFTPClient.ConfigFlags.DISABLE_SESSION_RESUMPTION);