VSFTPD Increased SSL Security verification

See if VSFTPD supports SSL

LDD ' which vsftpd ' |grep SSL

Output

libssl.so.6 =/lib64/libssl.so.6 (0x00002ba684304000)

Express support

Using OpenSSH to generate keys

OpenSSL req-x509-nodes-days 365-newkey Rsa:1024-keyout/etc/vsftpd/vsftpd.pem-out/etc/vsftpd/vsftpd.pem

Configure VSFTPD.CONF to add the following files

Ssl_enable=yesallow_anon_ssl=yesforce_local_data_ssl=yesforce_local_logins_ssl=yesforce_anon_logins_ssl= Yesforce_anon_data_ssl=yesssl_tlsv1=yesssl_sslv2=nossl_sslv3=norsa_cert_file=/etc/vsftpd/vsftpd.pemrsa_private _key_file=/etc/vsftpd/vsftpd.pem

Restart VSFTPD Service

FTP Using TLS connection appears: illegal PORT command error

To configure the passive mode of the VSFTPD:

#pasvpasv_enable =yespasv_min_port=30001pasv_max_port=31000

Iptables Open Passive Mode port

Iptables-a input-p TCP--dport 30001:31000-j ACCEPT

Restart vsftpd, connection OK

Fann Wong ldd ' which vsftpd ' |grep SSL

VSFTPD Increased SSL Security verification