Skip to content

Latest commit

 

History

History
29 lines (25 loc) · 888 Bytes

index.md

File metadata and controls

29 lines (25 loc) · 888 Bytes
Raw
aliases author date tags title
/2007/05/16/add-ssltls-support-to-proftpd/
Major Hayden
2007-05-16 18:45:37 -0700
ftp
security
Add SSL/TLS support to proftpd

To enable SSL/TLS support in proftpd, add the following to the proftpd.conf file:

<IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/ftpd/tls.log
    TLSRequired off
    TLSRSACertificateFile /usr/share/ssl/certs/server.crt
    TLSRSACertificateKeyFile /usr/share/ssl/private/server.key
    TLSCACertificateFile /usr/share/ssl/certs/cacert.crt
    TLSVerifyClient off
    TLSRenegotiate required off
</IfModule>

To require SSL/TLS on all connections, change TLSRequired to on. Of course, replace the certificate, key, and CA certificate (if applicable) to the correct files on your system.

Once you're all done, close your FTP connection and make a new one. There is no need to restart xinetd.