FTPS with VSFTP and OpenSSL

[Johan Strange]

Hi,

I have set up VSFTP to use ftps , the box is old running FC6. I have added the following lines in vsftpd.conf:

ssl_enable=YES
allow_anon_ssl=NO
ssl_sslv2=YES
ssl_sslv3=YES
ssl_tlsv1=YES
ssl_ciphers=DES-CBC3-SHA
rsa_cert_file=/etc/vsftpd/vsftpd.pem
force_local_data_ssl=YES
force_local_logins_ssl=YES

I have generated a certificate using OpenSSL:

openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem

I have accepted the untrusted cert in FireFTP and can connect securely

220 Banner
AUTH TLS
234 Proceed with negotiation.
PBSZ 0
200 PBSZ set to 0.
USER ftptest
331 Please specify the password.
PASS (password not shown)
230 Login successful.
FEAT
211-Features:
AUTH SSL
AUTH TLS
EPRT
EPSV
MDTM
PASV
PBSZ
PROT
REST STREAM
SIZE
TVFS
211 End
PWD
257 "/"
TYPE A
200 Switching to ASCII mode.
PROT P
200 PROT now Private.
PASV
227 Entering Passive Mode
LIST

I then do not get a directory listing, the account has read write and execute rights of the directory. After a while the connection drops and I get:

521 Data connections must be encrypted.
: //

I thought I had done everything I needed but clearly I have missed a step. Does anyone have any suggestions?