SSLFTPClient "Connection timed out: connect" on ge

Question

We have 30 different SSLFTP configurations running right now. I usually run into a lot of timeout issues and have to set autoPassiveIPSubstitution to true in many cases to get them to work.
However I can't get a particular site to work properly. It connects fine but I'm unable to get a directory listing using either:
dirDetails("./")
OR
dir()

and I cannot "get" files either with:
get()

They both give me a "Connection timed out: connect" error.

Here is the log from the failed "get" session:



INFO [LicensePropertiesBase] 24 Mar 2011 15:37:13.420 : Licence expiry date: 31 Dec 9999
INFO [LicensePropertiesBase] 24 Mar 2011 15:37:13.420 : Production licence
DEBUG [ProFTPClient] 24 Mar 2011 15:37:13.420 : Class: <snip>.FTPSClient
Version: 2.0.1
Build timestamp: 13-Jun-2008 14:44:45 EST
Java version: 1.6.0_18
<snip>
OS name: Windows 7
OS arch: x86
OS version: 6.1

DEBUG [CryptixProperties] 24 Mar 2011 15:37:13.460 : Successfully loaded the CryptixEDT properties file
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Listing CryptixEDT properties
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.PaddingScheme.PKCS5Padding=PKCS#5
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.Cipher.AES=Rijndael
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Msg.ok="OK"
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Msg.commandline.cancel="c"
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Mode.PCBC=com.enterprisedt.cryptix.provider.mode.PCBC
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.Cipher.TripleDES=DES-EDE3
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.bitLength.HAVAL=256
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : KeyGenerator.DES=com.enterprisedt.cryptix.provider.key.DESKeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : KeyGenerator.RPK=com.enterprisedt.cryptix.provider.rpk.RPKKeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : MessageDigest.HMAC-RIPEMD128=com.enterprisedt.cryptix.provider.mac.HMAC_RIPEMD128
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.Signature.SHA-1/ElGamal=SHA-1/ElGamal/PKCS#1
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Msg.no="No"
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.Signature.SHA-1/RPK=SHA-1/RPK/PKCS#1
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Debug.Level.RIPEMD160=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Msg.warning="Warning: "
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : MessageDigest.HMAC-HAVAL=com.enterprisedt.cryptix.provider.mac.HMAC_HAVAL
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.MessageDigest.{1=3 36 3 2 1} = RIPEMD160
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.OID.Cipher.RC2/CBC/PKCS#5={1 2 840 113549 3 2}
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Alg.Alias.Signature.SHA/DSA=SHA1withDSA
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Debug.Level.SPEED=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.461 : Signature.RawRSA=com.enterprisedt.cryptix.provider.rsa.RSASignature
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.KeyGenerator.AES=Rijndael
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.Cipher.LOKI=LOKI91
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.rounds.SPEED=64
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Msg.error="Error: "
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Msg.cancel="Cancel"
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.KeyPairGenerator.DH=ElGamal
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Cipher.DESX=com.enterprisedt.cryptix.provider.cipher.DESX
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Cipher.AES=com.enterprisedt.cryptix.provider.cipher.Rijndael
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : KeyPairGenerator.RSA=com.enterprisedt.cryptix.provider.rsa.BaseRSAKeyPairGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : KeyGenerator.RC4=com.enterprisedt.cryptix.provider.key.RC4KeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : KeyGenerator.RC2=com.enterprisedt.cryptix.provider.key.RC2KeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Msg.commandline.ok_cancel=" : (ok/cancel) "
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : PGP.ConfigPath=~/.pgp/config.txt
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.PaddingScheme.PKCS7=PKCS#7
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.OID.MessageDigest.SHA-1={1 3 14 3 2 26}
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.PaddingScheme.PKCS5=PKCS#5
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Debug.Level.LOKI91=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Debug.Level.IDEA=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Cipher.Square=com.enterprisedt.cryptix.provider.cipher.Square
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.rounds.Blowfish=16
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : KeyGenerator.CAST5=com.enterprisedt.cryptix.provider.key.CAST5KeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Debug.Level.Blowfish=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Alg.Alias.KeyGenerator.CAST=CAST5
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Debug.Level.MD5=0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Signature.MD5/ElGamal/PKCS#1=com.enterprisedt.cryptix.provider.elgamal.MD5_ElGamal_PKCS1Signature
ALL [CryptixProperties] 24 Mar 2011 15:37:13.462 : Signature.RawDSA=com.enterprisedt.cryptix.provider.dsa.RawDSASignature
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.MessageDigest.RIPEMD-160=RIPEMD160
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.KeyGenerator.LOKI-91=LOKI91
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.OID.Cipher.RSA/PKCS#1={1 2 840 113549 1 1 1}
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.MessageDigest.HMAC-RIPEMD-160=HMAC-RIPEMD160
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : PaddingScheme.PKCS#7=com.enterprisedt.cryptix.provider.padding.PKCS7
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.Signature.MD2/RSA=MD2/RSA/PKCS#1
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : KeyGenerator.SPEED=com.enterprisedt.cryptix.provider.key.SPEEDKeyGenerator
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : PaddingScheme.PKCS#5=com.enterprisedt.cryptix.provider.padding.PKCS5
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.KeyGenerator.CAST-128=CAST5
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Cipher.ARC4=com.enterprisedt.cryptix.provider.cipher.RC4
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.Alias.KeyGenerator.DES-2X=DES2X
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Mode.CBC=com.enterprisedt.cryptix.provider.mode.CBC
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : MessageDigest.RIPEMD160=com.enterprisedt.cryptix.provider.md.RIPEMD160
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Msg.commandline.yes_no_cancel=" : (yes/no/cancel) "
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : MessageDigest.SHA-1=com.enterprisedt.cryptix.provider.md.SHA1
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : MessageDigest.SHA-0=com.enterprisedt.cryptix.provider.md.SHA0
ALL [CryptixProperties] 24 Mar 2011 15:37:13.463 : Alg.OID.Cipher.RC5/CBC/PKCS#5={1 2 840 113549 3 9}
ALL

Answer 1

I'm able to connect fine using the Cute FTP Pro application:

--------------------------

STATUS:> [3/24/2011 4:44:59 PM] Getting listing ""...
STATUS:> [3/24/2011 4:44:59 PM] Resolving host name <snip>...
STATUS:> [3/24/2011 4:44:59 PM] Host name <snip>
STATUS:> [3/24/2011 4:44:59 PM] Connecting to FTP server... <snip>
STATUS:> [3/24/2011 4:45:00 PM] Socket connected. Waiting for welcome message...
[3/24/2011 4:45:00 PM] 220 <snip> FTP server (SecureTransport 4.1.1) ready.
STATUS:> [3/24/2011 4:45:00 PM] Connected. Authenticating...
COMMAND:> [3/24/2011 4:45:00 PM] AUTH TLS
[3/24/2011 4:45:00 PM] 234 SSLv23/TLSv1
STATUS:> [3/24/2011 4:45:00 PM] Establishing SSL session...
STATUS:> [3/24/2011 4:45:01 PM] Connected. Exchanging encryption keys...
STATUS:> [3/24/2011 4:45:01 PM] Applying certificate chain verification using MS Trusted Root Certification Authority store.
STATUS:> [3/24/2011 4:45:01 PM] This certificate is OK.
Session Cipher: None
STATUS:> [3/24/2011 4:45:01 PM] SSL Connect time: 260 ms.
STATUS:> [3/24/2011 4:45:01 PM] SSL encrypted session established.
COMMAND:> [3/24/2011 4:45:01 PM] PBSZ 0
[3/24/2011 4:45:01 PM] 235 PBSZ=0
COMMAND:> [3/24/2011 4:45:01 PM] USER <snip>
[3/24/2011 4:45:01 PM] 331 Password required for <snip>.
COMMAND:> [3/24/2011 4:45:01 PM] PASS <snip>
[3/24/2011 4:45:06 PM] 230 Virtual user <snip> logged in.
STATUS:> [3/24/2011 4:45:06 PM] Login successful.
COMMAND:> [3/24/2011 4:45:06 PM] PWD
[3/24/2011 4:45:06 PM] 257 "/" is current directory.
STATUS:> [3/24/2011 4:45:06 PM] Home directory: /
COMMAND:> [3/24/2011 4:45:06 PM] FEAT
[3/24/2011 4:45:06 PM] Informational Message Only:
211-Extensions supported
CHMOD
IDLE
UMASK
HELP
AUTH
MIRR
RTCK
STCK
VERS
FEAT
BIND
CERT
CHPWD
PROT
PBSZ
UTF8
211 END
STATUS:> [3/24/2011 4:45:06 PM] This site supports features.
COMMAND:> [3/24/2011 4:45:06 PM] REST 100
[3/24/2011 4:45:07 PM] 350 Restarting at 100.
STATUS:> [3/24/2011 4:45:07 PM] This site can resume broken downloads.
COMMAND:> [3/24/2011 4:45:07 PM] REST 0
[3/24/2011 4:45:07 PM] 350 Restarting at 0.
COMMAND:> [3/24/2011 4:45:07 PM] PBSZ 0
[3/24/2011 4:45:07 PM] 235 PBSZ=0
COMMAND:> [3/24/2011 4:45:07 PM] PROT P
[3/24/2011 4:45:07 PM] 200 PROT command successful
COMMAND:> [3/24/2011 4:45:07 PM] PASV
[3/24/2011 4:45:07 PM] 227 Entering Passive Mode (<snip>)
COMMAND:> [3/24/2011 4:45:07 PM] LIST
STATUS:> [3/24/2011 4:45:07 PM] Connecting FTP data socket... <snip>:40001...
[3/24/2011 4:45:07 PM] 150 Opening ASCII mode SSL data connection for file list.
STATUS:> [3/24/2011 4:45:07 PM] Connected. Exchanging encryption keys...
STATUS:> [3/24/2011 4:45:07 PM] Applying certificate chain verification using MS Trusted Root Certification Authority store.
STATUS:> [3/24/2011 4:45:07 PM] This certificate is OK.
Session Cipher: None
STATUS:> [3/24/2011 4:45:07 PM] SSL Connect time: 210 ms.
STATUS:> [3/24/2011 4:45:07 PM] SSL encrypted session established.
[3/24/2011 4:45:09 PM] 226 Transfer complete.
STATUS:> [3/24/2011 4:45:09 PM] Directory listing completed.

Answer 2

Maybe email the zipped logs with IP addresses to support at enterprisedt dot com