Welcome to the new Box Support website. Check out all the details here on what’s changed.

Box Status

FTP using lftp doesn't work (certificate issue)

Follow
New post
Christopher J Fields

We have been using lftp for large uploads to Box over the years since it allows more complex commands, and noticed an odd issue just popping up. We're using SSO passwords for this. When we log in we see the below when using ls or other standard commands.  Notably the standard UNIX 'ftp' works fine.   Any ideas?

lftp cjfields@illinois.edu@ftp.box.com:~> ls
ls: Fatal error: Certificate verification: unable to get local issuer certificate (C5:F9:F5:44:66:03:E4:91:20:3E:55:17:7B:BD:FC:1C:3F:EC:B9:FE)


0

Comments

6 comments

Date Votes
  • France

    Hi Christopher,

    Welcome to the Box Community!
     
    This would be something our Box Support team would like to investigate with you and may require specific account information. 
     
    I've gone ahead and created a ticket for you so that an agent can work directly with you on looking into this. Please check your email for details and updates.

    Thanks for your patience!

     

    0
    Comment actions Permalink
  • MarkCotch

    This was a certificate chain issue on the FTPS server:

    * Server certificate:
    * subject: C=US; ST=California; L=Redwood City; O=Box, Inc.; CN=*.box.com
    * start date: Nov 18 00:00:00 2020 GMT
    * expire date: Nov 17 23:59:59 2021 GMT
    * subjectAltName: host "ftp.box.com" matched cert's "*.box.com"
    * issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=GeoTrust RSA CA 2018

    Specifically the "GeoTrust RSA CA 2018" intermediate certificate is not included in your ca-certificate bundle.  

    https://cacerts.digicert.com/GeoTrustRSACA2018.crt.pem 

    In the short term you could import the intermediate certificate until BOX includes it in the server's certificate stack.

     

    0
    Comment actions Permalink
  • Christopher J Fields

    Thanks @MarkCotch. This was addressed internally and now lftp works w/o issues!

    0
    Comment actions Permalink
  • France

    @Mark, thanks for sharing your insight on this issue and for trying to help!

    @Christopher, I'm glad to hear that this has been addressed and that lftp works again as expected.

    Thanks All for your participation in this forum and let us know if there's anything else we may help you with.

    0
    Comment actions Permalink
  • david07

    I also faced this problem last some days and hope so this time I'm landing the right place.

    -1
    Comment actions Permalink
  • Andreo Steven

    I also thankful to you for sharing helpful information. 
    Good Job! Buddy.

    -1
    Comment actions Permalink

Please sign in to leave a comment.