HI Friends,

How to configure proftpd with ssl. I am using centos 5.3
I need to enable both implicit and explicit ssl/tls options in the proftpd.

Please help me.

Thanks

there are LOADS of guides about this online ready and waiting for you./ Pick one that looks suitable to your needs and if you have a *SPECIFIC* issue, please ask for help.

Hi Thank you for the reply

I tried But only explicit with ssl working and implicit not working and i am getting failed retrive directory listing error.
some gnu utils error specifically I need implicit ssl/over tls need So please help me
thanks

Ok, again, just saying "I tried", tells us nothing. WHAT did you try? What instructions did you follow? What message(s)/error(s) are you getting???

And did you bother to check the proFTP website, where this is covered and explained VERY WELL???
http://www.proftpd.org/docs/howto/TLS.html
http://www.proftpd.org/docs/contrib/mod_tls.html

From the ProFTPD website:
Read the rest on the website.

h[/I]


Hi Friends
I am getting connection refused error and i got failed to retrieve directroy listing
and i am not able to directory listing in file filezilla so please i will inform my configuration file
Thank you fpr your message

..which STILL does not tell us anything new. AGAIN:

1. What guides did you follow?
2. Have you read/understood the links posted to the ProFTPD site?
3. Did you bother to try to install the mod_tls plugin, as the ProFTPD site told you to, for implicit TLS?
4. Did you get any error(s)/message(s) doing so??

Until you provide details or more information, posting the same question over and over is pointless, as is just coming back saying "please help me". You've posted in this thread three times, and nothing has changed yet, and you haven't even acknowledged you have read anything, or answered anyones questions.

Hi,

The got the following error.

150 Opening ASCII mode data connection for file list
Error: GnuTLS error -110: The TLS connection was non-properly terminated.
Error: Transfer connection interrupted: ECONNABORTED - Connection aborted
Response: 226-Transfer complete
Response: 226 Quotas off
Error: Failed to retrieve directory listing in filezilla

and this is my proftpd.conf configuration file.

ServerName "ProFTPD"
#ServerType standalone
ServerType inetd
DefaultServer on
<Global>
DefaultRoot ~ psacln
AllowOverwrite on
</Global>
DefaultTransferMode binary
UseFtpUsers on

<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
TLSProtocol SSLv23
TLSOptions NoCertRequest
TLSRSACertificateFile /opt/ssl/proftpd.cert.pem
TLSRSACertificateKeyFile /opt/ssl/proftpd.key.pem
TLSVerifyClient on
TLSRequired on
</IfModule>
Please advise me.

so what do the server logs say? is you Google the error messages (You DID do that already, right?) You'll have already seen that often thislooks like a certificate error on the server side. And clearly as TLS is breaking, this is *NOT* actually abuot a denial of directory listings.

Note that errors to a client are intentionally NOT that useful, especially when it comes to security issues. What did your server side logs say when you looked at them?

Seriously???? Did you bother to read/understand the posts before this??
None of this tells us anything new. AGAIN:

• What guides did you follow?
• Have you read/understood the links posted to the ProFTPD site?
• Did you bother to try to install the mod_tls plugin, as the ProFTPD site told you to, for implicit TLS?
• Did you get any error(s)/message(s) doing so??

Until you provide details or more information, posting the same question over and over is pointless, as is just coming back saying "please help me". You've posted in this thread three times, and nothing has changed yet, and you haven't even acknowledged you have read anything, or answered anyones questions. All you've done here is AGAIN, post the same error.

PAY ATTENTION: Implicit TLS is very well explained on the Proftpd site. READ what's there, and then INSTALL the plugin and COMPILE ProFTPD with support built in. UNTIL YOU DO THIS, implicit TLS won't work, no matter how many times you come back and tell us it's not working.

Hi,

Thank you for the informations.

Now I sorted out this issues. Using only one changes in proftpd.conf
1. TLSoptions UseImplisitSSL and port 990
Then restart proftpd . Its working fine.

Thanks again

Can anyone tel Is it possible to use selfsigned certificate to use online server using proftpd.
Suggest me please

1 members found this post helpful.

So you followed the instructions and it worked? Congratulations
I will AGAIN suggest you READ THE INSTRUCTIONS. This is ALSO covered on the proftpd site.

Hi Friends,

Again I facing new problem in the proftpd with Implicit SSL. Its working fine except Iphone and ipad FTP Application. Application name is Dictamus.
Its connecting the server but Not able to upload files.
I am getting 2 error

1.STOR Command Failed(451-DAC.MP$) Append /Restart not permitted, Try again.
2. Could Not send data (60) in the ipad appications.

Nothing error not showning in the logs


Note : this working fine in the filezilla and winscp.

Kindly Help me on this.
Thanks

There is nothing we can help you WITH. This is obviously a problem with the iPad and iPhone application. Since you finally read the instructions and got implicit SSL working (and TESTED it), that's as far as it goes with Linux. You're not getting errors in the logs, and the errors you ARE getting are coming from the iPad/iPhone application.

So, contact the developers of that app, use another app, or write your own.

Thanks for the reply.

I need one more help.
Is it possible to configure Proftp working with default port and SSL. Because some of my ftp users use the default port and other users use SSL port. Please help me on this .

Thanks

no, that's nuts.

The point is SSL on FTP, implicit FTP, is decprecated, and should NOT BE USED. If you put implicit FTP on a normal FTP port then it is offiaically different protocol. Just like you can't run HTTPS on an HTTP URL. It makes NO SENSE to say that a client needs implicit SSL on port 21, that's not the standard and so would never be expected ever.

1 members found this post helpful.