Net::FTPSSL Cert and Key question

mmittiga17 has asked for the wisdom of the Perl Monks concerning the following question:

Does anyone know where Net:FTPSSL looks to for the client cert and key?

use Net::FTPSSL;
  my $ftps = Net::FTPSSL->new('xxx.xxx.xxxx',
                              Port => 21,
                              Encryption => 'E',
                              Debug => 1)
                              or die "Can't open xxxxxx;

   $ftps->login('xxxx', 'xxxxx')
   or die "Can't login: ", $ftps->$last_message();
   $ftps->cwd("/xxx/outbound") or die "Can't change  directory: ", $ft
+ps->last_message;

   $ftps->get("xxxx_Test.txt") or die "Can't get file: ",$ftps->last_m
+essage;

  $ftps->quit();
[download]

SSL connect attempt failed because of handshake problemserror: 14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate

I am trying to download a file from a vendor, I have their cert and key. Net::FTPSSL has no option to use a specific cert and key.

Any help will be appreciated.

Thanks

Comment on Net::FTPSSL Cert and Key question Download Code

Replies are listed 'Best First'.
Re: Net::FTPSSL Cert and Key question by nega (Scribe) on Apr 13, 2007 at 18:05 UTC
It doesn't look like Net::FTPSSL is setup to use client certificates. The relevant code is in Net::SSLeay, which is imported by Net::SSLeay::Handle, which is imported by Net::FTPSSL. Look at Using client certificates.	[reply]
Re: Net::FTPSSL Cert and Key question by Khen1950fx (Canon) on Apr 13, 2007 at 18:43 UTC
Net::FTPSSL uses IO::Socket::INET; in addition, for certificates and keys, you'll also need to use IO::Socket::SSL. The error message said that the handshake failed because of a bad certificate, but I doubt that because IO::Socket::INET doesn't appear to check certs, at least not in the way we would expect it to. I would run your program again, adding IO::Socket::SSL to the mix and see what happens. Ideally, both the server and client should have certificates and keys for a secure transaction. If you don't have them, I'd recommend that you get them. References: SSL Certificate-HOWTO Getting a private key and a real certificate Understanding and Investigating SSL Issues HOWTO-Certificates	[reply]