Create a certificate first, use the command:/usr/bin/opensslreq-x509-nodes-days365-newkeyrsa: 1024-keyoutvsftpd.pem-outvsftpd.pemwww.2cto.com edit vsftpd configuration file, add the following content to enable SSL :#...
Create a certificate and run the following command:
/Usr/bin/openssl req-x509-nodes-days 365-newkey rsa: 1024-keyout vsftpd. pem-out vsftpd. pem
Www.2cto.com
Edit the vsftpd configuration file and add the following content to enable SSL:
# Enable SSL
Ssl_enable = YES
# Encrypt data connections of non-anonymous users
Force_local_data_ssl = YES
# Encrypt non-anonymous user login connections
Force_local_logins_ssl = YES
# Use TLS v1
Ssl_tlsv1 = YES
# Specify a certificate
Rsa_cert_file =/etc/vsftpd. pem
Ssl_ciphers = HIGH
Save and restart the vsftpd service.
Use FileZilla Client to connect
You cannot use quickconnect mode. you must enter file --- sitemanager in the menu and select "Encryption", as shown in:
If "ssl_ciphers = HIGH" is not added to the configuration file, the following error will be reported when you use FileZilla Client for connection: after www.2cto.com is properly connected, a certificate error warning dialog box will be displayed, because the certificate is created by ourselves and not published by the authoritative CA center, ignore it, as shown in: www.2cto.com
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
