We could configure ssl support in vsftpd by using below steps.
Step 1) Create ssl key and self sign certificate
openssl genrsa -out /etc/pki/tls/vsftpd.key 2048
openssl req -new -x509 -key /etc/pki/tls/vsftpd.key -out /etc/pki/tls/certs/vsftpd.crt -days 365
Step 2) Pass parameters in vsftpd.conf
==============================
ssl_enable=YES
allow_anon_ssl=YES
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_tlsv2=YES
ssl_tlsv3=YES
rsa_cert_file=/etc/pki/tls/certs/vsftpd.crt
rsa_private_key_file=/etc/pki/tls/vsftpd.key
================================
step 3) Restart vsftpd
service vsftpd restart
Note :-> As it's now supporting certificate based ftp connection, so you have to use ssl supported ftp client software (eg- ftp_ssl)
ftp_ssl 192.168.0.40
Great article. Lovin it!
ReplyDelete