title: One more Fatal error: gnutls_handshake: A TLS packet with unexpected length was received
body: <p>All,</p>
  
  <p>After installing the new cert from Comodo in my MS2012 server, my FTPS connections from my RHEL6 server are failing with "gnutls_handshake" error. We moved from Verisign signed to Comodo. I went through the different "set" commands but still unable to connect successfully. Can you please help? Thanks a bunch..</p>
  
  <pre><code>lx1234$ lftp
  lftp :~&gt; open -u uname ftps://server
  Password:
  lftp uname@server:~&gt; set ftps:initial-prot ""
  lftp uname@server:~&gt; set ftp:ssl-force true
  lftp uname@server:~&gt; set ftp:ssl-protect-data true
  lftp uname@server:~&gt; set ssl:verify-certificate "yes"
  lftp uname@server:~&gt;debug 99999999
  ls
      FileCopy(0x15c4e80) enters state INITIAL
  FileCopy(0x15c4e80) enters state DO_COPY
  ---- dns cache hit
  ---- Connecting to server port 990
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: DHE_PSK_SHA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_RSA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_DSS_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_ARCFOUR_SHA1
  GNUTLS: HSK[0x19c5d40]: Keeping ciphersuite: RSA_ARCFOUR_MD5
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: PSK_SHA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_AES_256_CBC_SHA1
  GNUTLS: HSK[0x19c5d40]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1
  GNUTLS: EXT[0x19c5d40]: Sending extension CERT_TYPE
  GNUTLS: EXT[0x19c5d40]: Sending extension SAFE_RENEGOTIATION
  GNUTLS: HSK[0x19c5d40]: CLIENT HELLO was sent [93 bytes]
  GNUTLS: REC[0x19c5d40]: Sending Packet[0] Handshake(22) with length: 93
  GNUTLS: REC[0x19c5d40]: Sent Packet[1] Handshake(22) with length: 98
  GNUTLS: ASSERT: gnutls_buffers.c:599
  GNUTLS: XXX[]: ret: 0 Success.
  GNUTLS: XXX2[]: ret: 0 Success.
  GNUTLS: ASSERT: gnutls_record.c:921
  GNUTLS: ASSERT: gnutls_buffers.c:1032
  GNUTLS: ASSERT: gnutls_handshake.c:2700
  **** gnutls_handshake: A TLS packet with unexpected length was received.
  ---- Closing control socket
  ls: Fatal error: gnutls_handshake: A TLS packet with unexpected length was 
  received.
  </code></pre>