Debian/GPROFTPD won't allow TLS connections

sandygws · 12-21-2009, 10:16 AM

Hey everyone, I've set up GPROFTPD on Debian 5 x64, and can connect just fine using standard FTP.

I then followed the steps at http://www.unixmen.com/linux-tutoria...-tls-on-ubuntu to add TLS, and restarted the server.

Trying to connect via TSL/SSL returns the following:

Quote:

Status: Connection established, waiting for welcome message...
Response: 220 MyFTP
Command: AUTH TLS
Response: 500 AUTH not understood
Command: AUTH SSL
Response: 500 AUTH not understood
Error: Critical error
Error: Could not connect to server

Any ideas?

sandygws · 12-21-2009, 11:57 AM

Forgot my proftpd.conf:

Quote:

ServerType standalone
DefaultServer on
Umask 002
ServerName <>
ServerIdent on "<>"
ServerAdmin <>
IdentLookups off
UseReverseDNS off
Port <>
PassivePorts <>
#MasqueradeAddress None
TimesGMT off
MaxInstances 5
MaxLoginAttempts 3
TimeoutLogin 300
TimeoutNoTransfer 120
TimeoutIdle 120
DisplayLogin welcome.msg
DisplayChdir .message
User <>
Group admin
DirFakeUser on <>
DirFakeGroup on admin
DefaultTransferMode binary
AllowForeignAddress on
AllowRetrieveRestart on
AllowStoreRestart on
DeleteAbortedStores off
TransferRate RETR 0
TransferRate STOR 0
TransferRate STOU 0
TransferRate APPE 0
SystemLog /var/log/secure
RequireValidShell off

<IfModule mod_ratio.c>
Ratios off
SaveRatios off
RatioFile "/restricted/proftpd_ratios"
RatioTempFile "/restricted/proftpd_ratios_temp"
CwdRatioMsg "Please upload first!"
FileRatioErrMsg "FileRatio limit exceeded, upload something first..."
ByteRatioErrMsg "ByteRatio limit exceeded, upload something first..."
LeechRatioMsg "Your ratio is unlimited."
</IfModule>

<Limit LOGIN>
AllowUser <>
DenyALL
</Limit>

<Anonymous /data/downloads>
User <>
Group admin
AnonRequirePassword on
MaxClients 5 "The server is full, hosting %m users"
DisplayLogin welcome.msg
<Limit LOGIN>
Allow from all
Deny from all
</Limit>
AllowOverwrite on
<Limit LIST NLST STOR STOU APPE RETR RNFR RNTO DELE MKD XMKD SITE_MKDIR RMD XRMD SITE_RMDIR SITE SITE_CHMOD PW$
AllowAll
</Limit>
<Limit SITE_CHGRP MTDM >
DenyAll
</Limit>
</Anonymous>

DefaultRoot ~
IdentLookups off
ServerIdent on "FTP Server ready."

<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
TLSProtocol SSLv23
TLSOptions NoCertRequest
TLSRSACertificateFile /etc/proftpd/ssl/proftpd.cert.pem
TLSRSACertificateKeyFile /etc/proftpd/ssl/proftpd.key.pem
TLSVerifyClient off
TLSRequired on
TLSRenegotiate required off
</IfModule>

sandygws · 12-21-2009, 03:01 PM

In case anyone is having the same problem:

I finally got it working by adding 'LoadModule mod_tls.c' to the top of proftpd.conf.