php - FTPS problem: "A TLS packet with unexpected length was received." -

i'm trying connect ftps server (not sftp). connecting linux system, have tried lftp, ftp-ssl, , using php's ftp_ssl_connect, none of them work. (i have been able connect other ftps servers using or @ least of above methods).

the descriptive error have lftp debug way 11:

$ lftp lftp :~> open -u my-username ftps://server.net password:  lftp my-username@server.net:~> debug 99999999999 lftp my-username@server.net:~> ls filecopy(0x717bf0) enters state initial filecopy(0x717bf0) enters state do_copy ---- dns cache hit ---- connecting server.net (ip address) port 990 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_rsa_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_rsa_camellia_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_rsa_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_rsa_camellia_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_rsa_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_camellia_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_camellia_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: dhe_dss_arcfour_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: dhe_psk_sha_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: dhe_psk_sha_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: dhe_psk_sha_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: dhe_psk_sha_arcfour_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_rsa_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_rsa_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_rsa_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_dss_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_dss_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_dss_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_camellia_128_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_camellia_256_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_arcfour_sha1 gnutls: hsk[acfbb0]: keeping ciphersuite: rsa_arcfour_md5 gnutls: hsk[acfbb0]: removing ciphersuite: psk_sha_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: psk_sha_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: psk_sha_3des_ede_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: psk_sha_arcfour_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_aes_128_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_aes_256_cbc_sha1 gnutls: hsk[acfbb0]: removing ciphersuite: srp_sha_3des_ede_cbc_sha1 gnutls: ext[acfbb0]: sending extension cert_type gnutls: hsk[acfbb0]: client hello send [88 bytes] gnutls: rec[acfbb0]: sending packet[0] handshake(22) length: 88 gnutls: assert: gnutls_cipher.c:205 gnutls: rec[acfbb0]: sent packet[1] handshake(22) length: 93 gnutls: assert: gnutls_buffers.c:638 gnutls: assert: gnutls_record.c:909 gnutls: assert: gnutls_buffers.c:1152 gnutls: assert: gnutls_handshake.c:1032 gnutls: assert: gnutls_handshake.c:2331 **** gnutls_handshake: tls packet unexpected length received. ---- closing control socket ls: fatal error: gnutls_handshake: tls packet unexpected length received.

with php following:

warning: ftp_login(): ssl/tls handshake failed in /home/user/ftp.php on line 7 warning: ftp_login(): ssl enabled start negotiation in /home/user/ftp.php on line 7 cannot login

line 6: $connect = ftp_ssl_connect("server.net") or die("cannot connect");

line 7: $result = ftp_login($connect,"my-username","my-password") or die("cannot login");

with ftp-ssl:

$ ftp-ssl -d -z debug server.net ssl_debug_flag on connected server.net. 220-security notice 220-all activities may monitored.  system use indicates consent 220 monitoring.  information may given law enforcement. ftp: setsockopt: bad file descriptor name (server.net:user): my-username ---> auth ssl 234 ssl enabled start negotiation write 0x68c190 (102 bytes => 102 (66)) 0000 - 80 64 01 03 01 00 4b 00-00 00 10 00 00 39 00 00   .d....k......9.. 0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0   8..5............ 0020 - 00 00 33 00 00 32 00 00-2f 03 00 80 00 00 05 00   ..3..2../....... 0030 - 00 04 01 00 80 00 00 15-00 00 12 00 00 09 06 00   ................ 0040 - 40 00 00 14 00 00 11 00-00 08 00 00 06 04 00 80   @............... 0050 - 00 00 03 02 00 80 e9 28-25 ed ea 2d e4 d2 f2 25   .......(%..-...% 0060 - 80 e1 2e f1 c3 71                                 .....q read 0x68c190 (7 bytes => -1 (ffffffffffffffff)) ftp: ssl_connect error error:00000000:lib(0):func(0):reason(0) : connection reset peer

sorry if post long, i've been googling days no answer in sight. hoping debug info missed of use someone.

it looks server uses incompatible, or invalid key exchange algorithm. try use wireshark catch packets between client , server, shed light on issue. also, can try enable/disable key exchange algorithms.