locked
Unable to access azure web app FTP site RRS feed

  • Question

  • Each attempt at logging into my web app FTP sites using FileZilla, I get the error:
    "Received certificate chain could not be verified. Verification status is 1048576."

    My sites are in the Australia South East region.

    here is the full log from FileZilla:
    Resolving address of …http://waws-prod-ml1-003.ftp.azurewebsites.windows.net 
    Status:Connecting to xxx.xxx.xxx.xx:21...
    Status:Connection established, waiting for welcome message...
    Response:220 Microsoft FTP Service
    Command:AUTH TLS
    Response:234 AUTH command ok. Expecting TLS Negotiation.
    Status:Initializing TLS...
    Error:Received certificate chain could not be verified. Verification status is 1048576.
    Error:Could not connect to server




    Monday, May 29, 2017 1:40 AM

Answers

  • Issue was on the Azure side and has now been fixed. Our apologies.

    Nir (App Service team)


    Windows Azure Websites PM

    • Proposed as answer by Md Shihab Tuesday, May 30, 2017 3:16 AM
    • Marked as answer by Andrew Rauber Wednesday, May 31, 2017 3:35 AM
    Tuesday, May 30, 2017 3:10 AM

All replies

  • I am also having the same issue - FTP works - FTP over TLS is failing
    Monday, May 29, 2017 6:20 AM
  • I am also facing the same issue today.

    Connection established, initializing TLS...
    Error: Received certificate chain could not be verified. Verification status is 1048576.
    Error: Could not connect to server


    Monday, May 29, 2017 7:13 AM
  • I am also getting the same error message: Received certificate chain could not be verified. Verification status is 1048576
    Monday, May 29, 2017 8:16 AM

  • I got the same error, however my colleague did not update to the latest version of FileZilla and he could easyly access Azure.

    Monday, May 29, 2017 8:19 AM
  • i am facing same issue

    Thanks and Best Regards Umair

    Monday, May 29, 2017 8:19 AM
  • Uninstalling current Filezilla and installing 3.9.0.6 fixed the problem.
    Monday, May 29, 2017 9:18 AM
  • I used FileZilla 3.25.2. Enter port 21 for FTP, It works.

    Monday, May 29, 2017 9:24 AM
  • Am also experiencing this - can FTP to sites on other servers but FTP to Azure resulting in "Received certificate chain could not be verified. Verification status is 1048576."  Have tried the suggestions re Port 21 and TLS but with no joy. Trying plain FTP got me as far as the login but then rejected as insecure

    Christina

    Monday, May 29, 2017 9:36 AM
  • I am also getting same error on fileZilla FTP cleint. Did you able to solve it?
    Monday, May 29, 2017 9:49 AM
  • I managed to connect setting encryption to Plain Text in Site Manager. Obviously that means that your connection will not be encrypted, so don't transfer any sensitive data.
    Monday, May 29, 2017 10:06 AM
  • Have you tried using an alternate FTP client For e.g. winscp 

    I this response helps you, then please mark this as an "Answer" Regards, Kaushal Blog: http://blogs.msdn.com/b/kaushal/

    Monday, May 29, 2017 10:07 AM
  • The problem is actually on the Azure side.

    Found this post on Filezilla forum:

    Yes, the certificate chain sent by the server is indeed malformed.
    During the TLS handshake the server sends its certificate and a chain of issueing certificates. If the chain contains three certificates, say A, B and C, then A must be signed by B and B must be signed by C. Your server sends a chain where A is signed by C and C is signed by B.
    Please contact your server administrator or server hosting provider for assistance to have the server's certificate chain fixed.
    For reference, see https://tools.ietf.org/html/rfc5246#page-48:

    Link to the forum post: https://forum.filezilla-project.org/viewtopic.php?t=41565

    They're not talking exactly about Azure FTP problem, but the message is the same, and the fact that disabling encryption makes the problem go away on filezilla is a good point to tell Azure engineers to fix this issue.

    Hope they solve it ASAP.

    Regards

    • Proposed as answer by André Morata Monday, May 29, 2017 1:21 PM
    Monday, May 29, 2017 1:21 PM
  • Link to the forum post: https://forum.filezilla-project.org/viewtopic.php?t=41565

    The message mentioned in the forum may be the same but the error code is different (66 instead of 1048576).

    And it would be a lttle bit odd if all of a sudden all certificate chains on the entire Azure platform would be wrong.




    Monday, May 29, 2017 2:35 PM
  • Issue was on the Azure side and has now been fixed. Our apologies.

    Nir (App Service team)


    Windows Azure Websites PM

    • Proposed as answer by Md Shihab Tuesday, May 30, 2017 3:16 AM
    • Marked as answer by Andrew Rauber Wednesday, May 31, 2017 3:35 AM
    Tuesday, May 30, 2017 3:10 AM
  • It is fixed now.FTP is working now

    Thanks and Best Regards Umair

    Tuesday, May 30, 2017 4:49 AM
  • I am facing the same problem now

    Ahmed M. Abo Tameem

    Thursday, August 3, 2017 7:52 PM