The lftp command doesn't verify the TLS certificate by default in Red Hat Enterprise Linux 6

Solution Unverified - Updated -

Issue

  • I used the lftp command to connect the TLS enabled vsftpd server, and I saw a difference of the behavior between RHEL6 and RHEL7.
  • The server certificate on the vsftpd server was not valid, and the lftp command verified the certificate and failed to connect it on RHEL7 as expected.
  • But, the lftp command on RHEL6 doesn't verify the certificate and could connect the server unexpectedly.
  • What caused the difference?

Environment

Red Hat Enterprise Linux 6 (RHEL6)
Red Hat Enterprise Linux 7 (RHEL7)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content