Network Automation Software We are currently migrating this forum
over to our HelpSystems domain. Please
post all new threads in our new
HelpSystems Community Portal.
Post to the HelpSystems Forum
You are not currently logged on. You must be logged on in order to post. Log on
Or Create a new account
AutoMate Discussion
Decrease font size
Increase font size
Topic Title: FTPS Failed Auth due to certificate errors
Topic Summary: FTPS authentication failures
Created On: 03/11/2013 10:23 AM
Status: Read Only
Linear : Threading : Single : Branch
Search Topic Search Topic
Topic Tools Topic Tools
View similar topics View similar topics
View topic in raw text format. Print this topic.
 03/11/2013 10:23 AM
User is offline View Users Profile Print this message

Author Icon
TimothyCerveny
Student (5-19 posts)

Posts: 13
Joined: 01/25/2013

We recently upgraded our AutoMate BPA Agent 9 Task Builder to:

Premium Edition, 9.0.3.4

...and I have attempted a simple connection using FTPS_Explicit. I have a username, port number, and password. I do know that when I use CuteFTPPro or another opensource (GNU) client it works AFTER it has asked me to accept the certificate; however, using this version in the task builder and running a Logon + Logoff commands, I get the following error:

"FTP Failed (Error: Server certificate was rejected by the verifier because of an unknown certificate authority."

I enabled logging and have attached the code(sans the actual server name). It looks like it is waiting for a certificate from my server, but I cannot create it, accept any, or the like. 

Please help me understand either how to create a cert or what selections I should have in my Logon. I will now list WHAT is checked/enabled/listed in my Logon properties....

<AMFTP ACTIVITY="logon" SERVER="******.*******.com" USERNAME="******" PASSWORD="*****" TYPE="ftps_explicit" PORT="3752" LOGFILE="C:\Automate_Scripts_Repository\FTPLogs\Test.log" OVERWRITELOG="no" COMPRESSION="yes" CERTIFICATESOURCE="auto" SESSION="test" />

I have tested IGNORE VALID SERVER CERTIFICATE, PASSIVE MODE, and CLEAR COMMAND CHANNEL. I also have unchecked USE COMPRESSION - all have yielded the same results. 

 



 Category Survey



Task Steps: (Right click, Select All, Copy to copy to the clipboard. Steps can then be pasted into the AutoMate Task Builder)
 03/11/2013 10:35 AM
User is offline View Users Profile Print this message

Author Icon
Liz Casale
AUTOMATE EMPLOYEE

Posts: 940
Joined: 05/23/2011

Hi Timothy,

We will need you to apply the attached patch in order to get AutoMate 9 to accept the certificate. To apply the patch you will want to stop the AutoMate service, navigate to the installation directory for AutoMate (C:\Program Files\AutoMate 9), rename the old files and then copy in the new. You can then restart the service and run the task again. Please let us know your result.

 Category Survey





-------------------------
Liz Casale
Technical Support Representative
(213) 738-6966
Network Automation, Inc.

--------------------------------------------------------------------------------

AM5 5.5.5.1; AM6 6.2.8.0; AM7 7.1.3.0; AM8 8.0.9.0; AM9 9.0.3.4
BPA7 7.1.3.0; BPA8 8.0.9.0; BPA9 9.0.3.4
 07/10/2013 09:39 AM
User is offline View Users Profile Print this message

Author Icon
JerryDominowski
Apprentice (20-49)

Posts: 36
Joined: 10/31/2011

Hi Liz - Does this also apply to BPA Server 9? I'm migrating jobs from BPA 8.0.1.10 to BPA 9.0.3.4 and I'm encountering the following error:

FTP failed (error : Server certificate was rejected by the verifier because it has expired.)


Thanks,
Jerry

 Category Survey
 07/10/2013 10:46 AM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Jerry,

Would it be possible to post your task? If you do not feel comfortable posting your task you can email it over to support@networkautomation.com

Note: Make sure to reference this forum thread if you email.

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 07/11/2013 01:11 PM
User is offline View Users Profile Print this message

Author Icon
JerryDominowski
Apprentice (20-49)

Posts: 36
Joined: 10/31/2011

Ricardo, there is no longer a need to pursue this topic on our behalf. We have switched to using SFTP and that has resolved the issue.

Thank you.

Jerry

 Category Survey
 02/17/2016 07:29 AM
User is offline View Users Profile Print this message

Author Icon
TabGsi
n00b (>6 posts)

Posts: 1
Joined: 03/20/2014

We run BPA version 9.0.5.4 and have the same issue with accepting certificates.

The patch seems toe be version 9.0.3.

Is this issue also solved in 9.0.5.4 and also in BPA 10?



 Category Survey
AutoMate 6 version:
Windows version:
 02/18/2016 11:48 AM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hello,

Version 9.0.5.4 has all patches that were provided in any version before it. Can you please provide your error messages?

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 08/31/2016 10:51 AM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

We are running Automate Premium Version 9.0.5.4 and have the same issue/error for FTPS/SSL connection and certificate error.
Can anyone verify the FTPS/SSL functionality is really working and or the patch above is not required if on version 9.0.5.4?

The above error is also received after a certificate is renewed in my case.

 Category Survey
 08/31/2016 11:00 AM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

I am guessing the statement regarding version 9.0.5.4 is correct as the dll file reference is newer in this version than the contents of zip file above.
Now I am trying to figure out how to accept a new / updated certificate from vendor, again the same error occurs as indicated for initial FTPS connect, there must be a way to remove old or re-accept....looking for this is the help section.

 Category Survey
 08/31/2016 03:07 PM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi Fred,

The certificate should automatically take. Are you able to connect on a third party tool like filezilla on the same machine as AutoMate?

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 09/07/2016 02:47 PM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

Sorry for late reply.
Yes I can connect via third party tool (WS_FTP) and I am prompted for certificate, accept and connect fine.
The only way I can get the Automate script/FTP steps to work and connect is by checking the "Ignore invalid server certificate" box.

 Category Survey
 09/07/2016 02:52 PM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

Ignoring the certificate kind of defeats the purpose.

 Category Survey
 09/07/2016 03:00 PM
User is offline View Users Profile Print this message

Author Icon
Leonard Amabile
HelpSystems

Posts: 5454
Joined: 05/15/2007

Fred,

Is the certificate valid? WS_FTP and/or CuteFTP will prompt you with accept/deny for invalid certificates whereas AutoMate will need that option selected if the certificate is invalid.

 Category Survey
AutoMate 6 version:
Windows version:


-------------------------

Leonard Amabile | Director, Cross Platform Support
AutoMate | InterMapper | Skybot | Divisions of HelpSystems
T: +1.213.738.1700 | F: +1.213.738.7665
 09/07/2016 03:48 PM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

Yes certificate is valid, WS_FTP prompts at connection and I can either allow or allow for that connection only.
The existing FTP account/connection with previous certificate was working without the "Ignore" box checked.
The external FTP source renewed their certificate, this caused script failure because I was not aware this was happening, since then the script connection will not work without the ignore box.
I suspected the previous/old certificate was stored somewhere but cannot find to remove and then see if new certificate works.

I would think the new would replace any 'stored' version but maybe not.

 Category Survey
 09/08/2016 03:24 PM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

I tested this in AutoMate 10 (10.3.0.13) and does same issue exists.
From all the postings for FTPS/SSL it seems like little testing was done before release.
Do I need to open a support issue for this?

 Category Survey
 09/09/2016 11:21 AM
User is offline View Users Profile Print this message

Author Icon
Mary Manzano
HelpSystems

Posts: 280
Joined: 03/10/2014

Hello Fred,

Please upgrade to the latest version of AutoMate 10.5.0. If this version still does not correct the issue, please Open a support ticket or email us at automate.support@helpsystems.com referencing the Forum post.



 Category Survey
AutoMate 6 version:
Windows version:


-------------------------
Mary Manzano | Technical Consultant
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700 | F: +1.213.738.7665
 09/16/2016 08:10 AM
User is offline View Users Profile Print this message

Author Icon
FredShindle
Apprentice (20-49)

Posts: 33
Joined: 12/31/2009

Trial and error?
I would think a reply from support person would be, I have verified your problem resolved/working in v1.2.3, upgrade when possible and your issue will be resolved.
Not upgrade and hope that fixes, if not call the next person.

Sorry to be so blunt.

 Category Survey
 09/16/2016 02:14 PM
User is offline View Users Profile Print this message

Author Icon
Mary Manzano
HelpSystems

Posts: 280
Joined: 03/10/2014

Hello Fred,

 

I apologize for the lack of response on my part. I would like to take a look at the issue via a remote session if possible. I will start a ticket for you. Please reply with your availability for next week so that we can schedule a remote session.



 Category Survey
AutoMate 6 version:
Windows version:


-------------------------
Mary Manzano | Technical Consultant
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700 | F: +1.213.738.7665
 10/03/2016 12:42 PM
User is offline View Users Profile Print this message

Author Icon
JamesLankford
Artisan (200-499)

Posts: 369
Joined: 11/26/2012

I'm also experiencing this issue; I'm running BPA Server 10.4.2.1. Should I post input here or switch over to the BPA Server forum and start a new post? I found this thread while doing a search.



 Category Survey
AutoMate 6 version:
Windows version:


-------------------------
<html />
 10/05/2016 11:08 AM
User is offline View Users Profile Print this message

Author Icon
Ricardo Castaneda
HelpSystems

Posts: 3424
Joined: 01/11/2008

Hi James,

It would be best to open a fresh thread under BPA so that we can best assist you.

 Category Survey


-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700
 10/05/2016 11:39 AM
User is offline View Users Profile Print this message

Author Icon
JamesLankford
Artisan (200-499)

Posts: 369
Joined: 11/26/2012

I believe I have resolved my own issue - thanks.



 Category Survey
AutoMate 6 version:
Windows version:


-------------------------
<html />
Statistics
18258 users are registered to the AutoMate Discussion forum.
There are currently 0 users logged in.
The most users ever online was 5551 on 01/08/2018 at 11:11 AM.
There are currently 1065 guests browsing this forum, which makes a total of 1065 users using this forum.

FuseTalk Enterprise Edition v4.0 - © 1999-2020 FuseTalk Inc. All rights reserved.

Sitemap Network Automation Software Blog