vsftpd with FTPS
Only a few steps are needed to activate FTPS :
- First you must generate an appropriate ssl certificate:
openssl req -new -x509 -nodes -out vsftpd.pem -keyout vsftpd.pem - Copy the cert to your vsftpd directory:
cp vsftpd.pem /etc/vsftpd - Add the following to vsftpd.conf:
ssl_enable=YES
rsa_cert_file=/etc/vsftpd/vsftpd.pem
force_local_data_ssl=NO
Once the above configuration is active, system (and “virtual”) users will be required to use a client that supports FTPS. If your server allows Anonymous users, they will only be able to login with plain old FTP. With vsftpd, FTPS is only for authenticated users.