Ubuntu: How to Enable tls/ssl in proftpd

[Diablo925]

How to Enable tls/ssl in proftpd

Make folder to SSL

1: Create SSL Folder

Code:

mkdir /etc/proftpd/ssl

2: Generate ssl certificate

Code:

openssl req -new -x509 -days 365 -nodes -out /etc/proftpd/ssl/proftpd.cert.pem -keyout /etc/proftpd/ssl/proftpd.key.pem

output

Code:

Generating a 2048 bit RSA private key .....................+++ ..........+++ writing new private key to 'proftpd.key.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. -----

Code:

Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:New York Locality Name (eg, city) []:NYC Organization Name (eg, company) [Internet Widgits Pty Ltd]:Name of company Organizational Unit Name (eg, section) []: just press enter Common Name (e.g. server FQDN or YOUR name) []: website name example.com Email Address []:Email

3: Enable TLS In ProFTPd

edit proftpd.conf

Code:

nano /etc/proftpf/proftpd.conf

on liste line add

Code:

Include /etc/proftpd/ssl.conf

save and exit

4: make ssl.conf

Code:

nano /etc/proftpd/ssl.conf

add

Code:

<IfModule mod_dso.c> LoadModule mod_tls.c </IfModule> <IfModule mod_tls.c> TLSEngine on TLSLog /var/log/proftpd/tls.log TLSProtocol SSLv23 TLSOptions NoCertRequest AllowClientRenegotiations NoSessionReuseRequired TLSRSACertificateFile /etc/proftpd/ssl/proftpd.cert.pem TLSRSACertificateKeyFile /etc/proftpd/ssl/proftpd.key.pem TLSVerifyClient off TLSRequired on </IfModule>

save and exit

5: restart proftpd

Code:

/etc/init.d/proftpd restart

now you can use tls/ssl

in filezilla type ftps://website.tld

[scriptcode]

Nice Tutorial. Helped me a lot. BUT: There is an error in your tutorial:

Code:

nano /etc/proftpf/proftpd.conf

This Path is wrong: The proftpd.conf can be only found under /etc/proftp/proftpd.conf (without the f). I think it is a literal error.

Best regards,

Felix

[iraqiboy90]

Thanks for the post.
Installed on Centos 7 and working fine so far.
Regarding the paths on Centos 7; a folder for proftpd does not exist, so I had to create one before being able to create the ssl folder