How to fix ProFTP Handshake Trouble in Plesk

Plesk-LogoI fixed a problem this morning which wouldn’t let the latest version of FileZilla v3.10.1.1 connect to one of my client’s servers anymore.

This had not been a problem in the past.

The connection itself worked, but FileZilla failed due to a problem with the TLS Certificate. Here’s the error:

Turns out that FileZilla have made a few changes and deprecated the insecure RC4 algorithm in FTP over TLS. Since ProFTP didn’t know the path to the server certificates, TLS failed and hence no connection was possible.

Thankfully there was an easy fix for this, courtesy of this Parallels Knowledge Base article: http://kb.sp.parallels.com/en/2207

To add the default Plesk certificates to the server, all I had to do was tweak the ProFTP config file at /etc/proftpd.conf and add the following at the bottom:

In this example the Server Certificate section contains the default path to Plesk’s certificates, but feel free to substitute them if yours are stored elsewhere.

There’s no need to restart xinetd because ProFTP creates a new process for every new connection, which will then include the new configuration. NOw FileZilla can connect without a hitch, only displaying the new Server Certificate the first time it is encountered:

Screen_Shot_2015-02-14_at_07_50_05

Note that this issue no longer occurs with newer installations of Plesk. This particular instance of Plesk has seen many updates since version 10.4, hence the tweak was necessary.

  • http://kb.sp.parallels.com/en/2207
  • https://filezilla-project.org
  • http://superuser.com/questions/874981/recieved-tls-alert-from-the-server-handshake-failed-40

Jay is the CEO and founder of WP Hosting, a boutique style managed WordPress hosting and support service. He has been working with Plesk since version 9 and is a qualified Parallels Automation Professional. In his spare time he likes to develop iOS apps and WordPress plugins, or draw on tablet devices. He blogs about his coding journey at http://wpguru.co.uk and http://pinkstone.co.uk.

One thought on “How to fix ProFTP Handshake Trouble in Plesk

Add your voice!