Add ssl Support For vsftpd

Source: Internet
Author: User
Tags ftp client filezilla
Add ssl Support For vsftpd-Linux Enterprise Application-Linux server application information. For more information, see. For the transmission of some important/confidential files, the use of ordinary ftp plain text transmission may cause information leakage, so the use of ssl encrypted transmission is a better

Solution.

Case: freebsd + vsftpd 2.03 + ssl

Vsftpd2.03 has been installed previously. Now you need to add ssl support. Switch to the root permission:

1. Install openssl,

Root # cd/usr/ports/security/openssl
Root # make install clean

2. reinstall vsftpd2.03 and add ssl support.

Root #/cd/usr/ports/ftp/vsftpd/
Root # make deinstall

I don't know what the ssl compilation parameters are? View the Makefile file.

Root # more Makefile

A row is displayed.

. If! Defined (WITHOUT_SSL) & defined (WITH_VSFTPD_SSL)

Now you know

Root # make WITH_VSFTPD_SSL = yes install clean

3. Create a certificate:

Openssl req-new-x509-nodes-out vsftpd. pem-keyout vsftpd. pem

After entering the relevant content, generate the vsftpd. pem certificate. Place the secondary certificate. /Usr/share/ssl/directory

4. Modify the vsftpd. conf file

Root # ee/usr/local/etc/vsftpd. conf

Add some content:

Ssl_enable = YES
Ssl_sslv2 = YES
Force_local_data_ssl = YES
Force_local_logins_ssl = YES
Rsa_cert_file =/usr/share/ssl/vsftpd. pem

Ssl_enable = YES supports the encryption protocol.
Ssl_sslv2 = YES supports Secure Socket Layer v2
Force_local_data_ssl = YES
Force_local_logins_ssl = YES

These two lines force non-anonymous users to use encrypted login and data transmission. If they are set to NO, users can choose to encrypt or not encrypt them.

Rsa_cert_file =/usr/share/ssl/vsftpd. pem

Specify the certificate path

Default Value: =/usr/share/ssl/certs/vsftpd. pem

5. Restart vsftpd and use the client for testing.

Take FileZilla as an example. Change the Servertype from ftp to FTP over SSL (explicit encryption), modify transmission Mode Edit-> Settings-> Firewall settings, and select Passive Mode (if ftp is inside the Firewall) fileZilla is an open-source ftp client, which is very useful. Haha.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.