LinuxQuestions.org - AUTH TLS for FTP

The vsftpd.conf man is actually very good.

You need to enable this options on vsftpd.conf

Code:

#this is very important

ssl_enable=YES



ssl_tlsv1=YES 

ssl_sslv2=NO  #you can enable this if you to allow version 2 of ssl

ssl_sslv3=NO  #you can enable this if you to allow version 3 of ssl

rsa_cert_file=/etc/vsftpd/vsftpd.pem

You will have to generate the certificate:

Code:

cd /etc/vsftpd  # or wherever your vsftpd config directory is

openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout vsftpd.pem -out vsftpd.pem

Also if you want clients to be required to connect with tls/ssl add this line

Code:

force_local_logins_ssl=YES

If you want to also encrypt data(as opposed to just the login) add this line.

Code:

force_local_data_ssl=YES

You have to make sure that vsftpd was compiled with ssl support(most distributions enable this by default).
The rest of the options for vsftpd are the same as if there were no ssl.