Add ssl Support For vsftpd

Add ssl Support For vsftpd-Linux Enterprise Application-Linux server application information. For more information, see. For the transmission of some important/confidential files, the use of ordinary ftp plain text transmission may cause information leakage, so the use of ssl encrypted transmission is a better

Solution.

Case: freebsd + vsftpd 2.03 + ssl

Vsftpd2.03 has been installed previously. Now you need to add ssl support. Switch to the root permission:

1. Install openssl,

Root # cd/usr/ports/security/openssl
Root # make install clean

2. reinstall vsftpd2.03 and add ssl support.

Root #/cd/usr/ports/ftp/vsftpd/
Root # make deinstall

I don't know what the ssl compilation parameters are? View the Makefile file.

Root # more Makefile

A row is displayed.

. If! Defined (WITHOUT_SSL) & defined (WITH_VSFTPD_SSL)

Now you know

Root # make WITH_VSFTPD_SSL = yes install clean

3. Create a certificate:

Openssl req-new-x509-nodes-out vsftpd. pem-keyout vsftpd. pem

After entering the relevant content, generate the vsftpd. pem certificate. Place the secondary certificate. /Usr/share/ssl/directory

4. Modify the vsftpd. conf file

Root # ee/usr/local/etc/vsftpd. conf

Add some content:

Ssl_enable = YES
Ssl_sslv2 = YES
Force_local_data_ssl = YES
Force_local_logins_ssl = YES
Rsa_cert_file =/usr/share/ssl/vsftpd. pem

Ssl_enable = YES supports the encryption protocol.
Ssl_sslv2 = YES supports Secure Socket Layer v2
Force_local_data_ssl = YES
Force_local_logins_ssl = YES

These two lines force non-anonymous users to use encrypted login and data transmission. If they are set to NO, users can choose to encrypt or not encrypt them.

Rsa_cert_file =/usr/share/ssl/vsftpd. pem

Specify the certificate path

Default Value: =/usr/share/ssl/certs/vsftpd. pem

5. Restart vsftpd and use the client for testing.

Take FileZilla as an example. Change the Servertype from ftp to FTP over SSL (explicit encryption), modify transmission Mode Edit-> Settings-> Firewall settings, and select Passive Mode (if ftp is inside the Firewall) fileZilla is an open-source ftp client, which is very useful. Haha.