Does FTPS check only support implicit negotiation?

Troubleshooting
1

CMK version: Raw Edition 2.2.0p12
OS version: Debian 11

Error message: Cannot make SSL connection. 140011100090944:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:

**Output of “cmk --debug -vvn hostname”: Checkmk version 2.2.0p12
Failed to lookup IPv4 address of hostname via DNS: [Errno -5] No address associated with hostname
**

This is the error I would expect on attempting a SSL conect (like HTTPS) but rfc 4217 only describes STARTTLS negotiation?

2

why does the output say that?

3

I have no idea - you’d need to ask whover wrote this stuff. It is connecting to the named host but possibly trying to resolve a CN?

Regardless, check_ftp is just a symlink to check_tcp which does not do STARTTLS.