Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 29th July 2009, 12:35
Johan Strange Johan Strange is offline
Junior Member
 
Join Date: Feb 2007
Posts: 8
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default FTPS with VSFTP and OpenSSL

Hi,

I have set up VSFTP to use ftps , the box is old running FC6. I have added the following lines in vsftpd.conf:

ssl_enable=YES
allow_anon_ssl=NO
ssl_sslv2=YES
ssl_sslv3=YES
ssl_tlsv1=YES
ssl_ciphers=DES-CBC3-SHA
rsa_cert_file=/etc/vsftpd/vsftpd.pem
force_local_data_ssl=YES
force_local_logins_ssl=YES

I have generated a certificate using OpenSSL:

openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem

I have accepted the untrusted cert in FireFTP and can connect securely

220 Banner
AUTH TLS
234 Proceed with negotiation.
PBSZ 0
200 PBSZ set to 0.
USER ftptest
331 Please specify the password.
PASS (password not shown)
230 Login successful.
FEAT
211-Features:
AUTH SSL
AUTH TLS
EPRT
EPSV
MDTM
PASV
PBSZ
PROT
REST STREAM
SIZE
TVFS
211 End
PWD
257 "/"
TYPE A
200 Switching to ASCII mode.
PROT P
200 PROT now Private.
PASV
227 Entering Passive Mode
LIST

I then do not get a directory listing, the account has read write and execute rights of the directory. After a while the connection drops and I get:

521 Data connections must be encrypted.
: //

I thought I had done everything I needed but clearly I have missed a step. Does anyone have any suggestions?
Reply With Quote
Sponsored Links
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 11:07.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.