We have been using lftp for large uploads to Box over the years since it allows more complex commands, and noticed an odd issue just popping up. We're using SSO passwords for this. When we log in we see the below when using ls or other standard commands. Notably the standard UNIX 'ftp' works fine. Any ideas?
lftp cjfields@illinois.edu@ftp.box.com:~> ls
ls: Fatal error: Certificate verification: unable to get local issuer certificate (C5:F9:F5:44:66:03:E4:91:20:3E:55:17:7B:BD:FC:1C:3F:EC:B9:FE)
Hi Christopher,
Welcome to the Box Community!
This would be something our Box Support team would like to investigate with you and may require specific account information.
I've gone ahead and created a ticket for you so that an agent can work directly with you on looking into this. Please check your email for details and updates.
Thanks for your patience!
This was a certificate chain issue on the FTPS server:
* Server certificate:
* subject: C=US; ST=California; L=Redwood City; O=Box, Inc.; CN=*.box.com
* start date: Nov 18 00:00:00 2020 GMT
* expire date: Nov 17 23:59:59 2021 GMT
* subjectAltName: host "ftp.box.com" matched cert's "*.box.com"
* issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=GeoTrust RSA CA 2018
Specifically the "GeoTrust RSA CA 2018" intermediate certificate is not included in your ca-certificate bundle.
https://cacerts.digicert.com/GeoTrustRSACA2018.crt.pem
In the short term you could import the intermediate certificate until BOX includes it in the server's certificate stack.
@Mark, thanks for sharing your insight on this issue and for trying to help!
@Christopher, I'm glad to hear that this has been addressed and that lftp works again as expected.
Thanks All for your participation in this forum and let us know if there's anything else we may help you with.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.