To enable ftps on my CentOS 5 server I first needed to create a self-signed certificate:<\/p>\n
# cd \/etc\/pki\/tls\/certs
\n# make vsftpd.pem
\numask 77 ; \\
\n\tPEM1=`\/bin\/mktemp \/tmp\/openssl.XXXXXX` ; \\
\n\tPEM2=`\/bin\/mktemp \/tmp\/openssl.XXXXXX` ; \\
\n\t\/usr\/bin\/openssl req -utf8 -newkey rsa:1024 -keyout $PEM1 -nodes -x509 -days 365 -out $PEM2 -set_serial 0 ; \\
\n\tcat $PEM1 > vsftpd.pem ; \\
\n\techo “” >> vsftpd.pem ; \\
\n\tcat $PEM2 >> vsftpd.pem ; \\
\n\trm -f $PEM1 $PEM2
\nGenerating a 1024 bit RSA private key
\n……….++++++
\n………………..++++++
\nwriting new private key to ‘\/tmp\/openssl.R27560’
\n—–
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [GB]:Country<\/em>
\nState or Province Name (full name) [Berkshire]:State<\/em>
\nLocality Name (eg, city) [Newbury]:City<\/em>
\nOrganization Name (eg, company) [My Company Ltd]:Company<\/em>
\nOrganizational Unit Name (eg, section) []:Department<\/em>
\nCommon Name (eg, your name or your server’s hostname) []:Servername<\/em>
\nEmail Address []:Emailaddress<\/em>\n<\/p><\/blockquote>\nCopy the newly created certificate to \/etc\/vsftpd:<\/p>\n
# cp -p vsftpd.pem \/etc\/vsftpd\/<\/p><\/blockquote>\n
Add the following to the vsftpd.conf file:<\/p>\n
# vi \/etc\/vsftpd\/vsftpd.conf
\n…
\nssl_enable=YES
\nrsa_cert_file=\/etc\/vsftpd\/vsftpd.pem
\n…<\/p><\/blockquote>\nNote: As is above, this will not allow non-anoymous users to use plain ftp. They will have to use ftps. To change this behavior, add the following to your vsftpd.conf:<\/p>\n
force_local_data_ssl=NO<\/p>\n
Then, restart\/start vsftpd:<\/p>\n
service vsftpd restart\n<\/p><\/blockquote>\n
Note: This worked fine from WinSCP and SmartFTP, but Filezilla gives me the following:
\nError:\tGnuTLS error -12: A TLS fatal alert has been received.
\nError:\tCould not connect to server<\/p>\n","protected":false},"excerpt":{"rendered":"To enable ftps on my CentOS 5 server I first needed to create a self-signed certificate: # cd \/etc\/pki\/tls\/certs # make vsftpd.pem umask 77 ; \\ PEM1=`\/bin\/mktemp \/tmp\/openssl.XXXXXX` ; \\ PEM2=`\/bin\/mktemp \/tmp\/openssl.XXXXXX` ; \\ \/usr\/bin\/openssl req -utf8 -newkey rsa:1024 -keyout $PEM1 -nodes -x509 -days 365 -out $PEM2 -set_serial 0 ; \\ cat $PEM1 > vsftpd.pem [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[186,185],"class_list":["post-532","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-ftps","tag-vsftpd"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=532"}],"version-history":[{"count":4,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/532\/revisions"}],"predecessor-version":[{"id":1042,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/532\/revisions\/1042"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}