RLC-542WA can't connect to ftp server

[user_703793344291048_703793344291048]

Hi
The RLC-542WA camera is unable to connect to the ftp server after a firmware update. On the DUO2WIFI camera the connection is established. When can you expect a firmware update for the 542WA?

<12-06-2023 08:03:28> FTP Session 11325 172.16.0.117 [Response] 220-FileZilla Server 1.7.2
<12-06-2023 08:03:28> FTP Session 11325 172.16.0.117 [Command] AUTH TLS
<12-06-2023 08:03:28> FTP Session 11325 172.16.0.117 [Response] 234 Using authentication type TLS.
<12-06-2023 08:03:28> FTP Session 11325 172.16.0.117 [Error] GnuTLS error -87: No supported cipher suites have been found.
<12-06-2023 08:03:28> FTP Session 11325 172.16.0.117 [Error] Control channel closed with error from source 0. Reason: ECONNABORTED - Connection aborted.

[joseph_1979]

@user_703793344291048_703793344291048 I think there is an issue on Filezilla sever when using FTPS (explicit). Try if it works on Cerberus ftp server (free).

Try this

1.(A) Shut down the service part of zFTPServer.
2.(A) Open Settings.ini in the zFTPServer directory
3. Go to the [FTPS Ciphers] line. Below are the ciphers zFTP offers for negotiation.
4. Go to the end of the line listing the ciphers, and before the terminal double-quote, add:

[FTPS Ciphers]
"<List of other ciphers>,DHE-RSA-AES256-SHA,DHE-RSA-CAMELLIA256-SHA,DHE-RSA-AES128-SHA,DHE-RSA-CAMELLIA128-SHA"

5. (A) Save the file.
6. (A) Start the service again.

(A) means administrative privileges required.

[user_703793344291048_703793344291048]

@joseph_1979 No it doesn't work. The camera immediately tries to connect over FTPS, even though I have "FTPS only" turned off in the settings. The duo2wifi camera had the same problem out of the box, but a firmware update helped. Unfortunately the 542wa worked normally out of the box connecting over ftp, but after the update it tries to connect over ftps and that doesn't work. If this has been fixed on the duo2wifi then hopefully the 542wa will be fixed too. Only when will it be fixed?

[joseph_1979]

@user_703793344291048_703793344291048 Just to test it out can you add the ciphers I listed below. It shouldn't take you long but save the file before doing any changes. I see that the cipher is not found in the Filezilla config.

[user_703793344291048_703793344291048]

@joseph_1979 I have tested Cerberus Enterprise 13.0.1.0 (trial version) and it works with default install.

12.06.2023 13:10:14172.16.0.117 AUTH TLS
12.06.2023 13:10:14172.16.0.117 Authentication method accepted
12.06.2023 13:10:15172.16.0.117 SSL connection using TLSv1.2 (DHE-RSA-AES256-GCM-SHA384), 256 bit encryption
12.06.2023 13:10:15172.16.0.117 SSL connection established

Unfortunately, this ftp server is paid and quite expensive. Other than that, duo2wifi runs on the filezilla server without any problems.

[joseph_1979]

@user_703793344291048_703793344291048 You see that cipher shown in your reply is not included in Filezilla. If you add it then it should work.

[user_703793344291048_703793344291048]

@joseph_1979 I can't add this to the server, I don't see the option anywhere. Also, I expect the 542wa to work like other Reolink camera models. Before the firmware update, the camera worked with the filezilla ftp server without any problems.

[joseph_1979]

s@user_703793344291048_703793344291048 So you were using the FTP rather than FTPS. Then email Reolink support and inform them about this.

[user_703793344291048_703793344291048]

@joseph_1979 I have already sent information to support, unfortunately no response so far. Thank you for your help and duo2wifi is using different cipher which works in filezilla.
SSL connection using TLSv1.2 (ECDHE-RSA-AES256-GCM-SHA384), 256 bit encryption

[joseph_1979]

@user_703793344291048_703793344291048 Eh........ they now support ECDHE (Elliptic curve Diffie–Hellman exchange). Cerberus accepts both ciphers.

[user_703793344291048_703793344291048]

Hello again
I managed to find a solution. The default certificate in the FileZilla server does not support DHE-RSA, only ECDHE-RSA. Therefore you have to create your own certificate. I downloaded OpenSLL and generated the key and certificate and imported it into the server. Now both cameras connect to the server without any problems.