Ubuntu: How to Enable tls/ssl in proftpd

Ubuntu: How to Enable tls/ssl in proftpd - Printable Version

+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: Community Guides & How-To's v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=33)
+---- Thread: Ubuntu: How to Enable tls/ssl in proftpd (/showthread.php?tid=42)

Ubuntu: How to Enable tls/ssl in proftpd - Diablo925 - 07-23-2014

How to Enable tls/ssl in proftpd

Make folder to SSL

1: Create SSL Folder

Code:
mkdir /etc/proftpd/ssl

2: Generate ssl certificate

Code:
openssl req -new -x509 -days 365 -nodes -out /etc/proftpd/ssl/proftpd.cert.pem -keyout /etc/proftpd/ssl/proftpd.key.pem

output

Code:
Generating a 2048 bit RSA private key
 .....................+++
 ..........+++
 writing new private key to 'proftpd.key.pem'
 -----
 You are about to be asked to enter information that will be incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -----

Code:
Country Name (2 letter code) [AU]:US
 State or Province Name (full name) [Some-State]:New York
 Locality Name (eg, city) []:NYC
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:Name of company 
 Organizational Unit Name (eg, section) []: just press enter
 Common Name (e.g. server FQDN or YOUR name) []: website name example.com
 Email Address []:Email

3: Enable TLS In ProFTPd

edit proftpd.conf

Code:
nano /etc/proftpf/proftpd.conf

on liste line add

Code:
Include /etc/proftpd/ssl.conf

save and exit

4: make ssl.conf

Code:
nano /etc/proftpd/ssl.conf

add

Code:
<IfModule mod_dso.c>
   LoadModule mod_tls.c
 </IfModule>

 <IfModule mod_tls.c>
   TLSEngine                  on
   TLSLog                     /var/log/proftpd/tls.log
   TLSProtocol                SSLv23
   TLSOptions                 NoCertRequest AllowClientRenegotiations NoSessionReuseRequired
   TLSRSACertificateFile      /etc/proftpd/ssl/proftpd.cert.pem
   TLSRSACertificateKeyFile   /etc/proftpd/ssl/proftpd.key.pem
   TLSVerifyClient            off
   TLSRequired                on
 </IfModule>

save and exit

5: restart proftpd

Code:
/etc/init.d/proftpd restart

now you can use tls/ssl

in filezilla type ftps://website.tld

RE: Ubuntu: How to Enable tls/ssl in proftpd - scriptcode - 06-25-2015

Nice Tutorial. Helped me a lot. BUT: There is an error in your tutorial:

Code:
nano /etc/proftpf/proftpd.conf

This Path is wrong: The proftpd.conf can be only found under /etc/proftp/proftpd.conf (without the f). I think it is a literal error.

Best regards,

Felix

RE: Ubuntu: How to Enable tls/ssl in proftpd - iraqiboy90 - 04-21-2020

Thanks for the post.
Installed on Centos 7 and working fine so far.
Regarding the paths on Centos 7; a folder for proftpd does not exist, so I had to create one before being able to create the ssl folder