[ASK] FTPS Server Public Key Problem

arfal · 02-22-2011, 03:59 AM

Hi,

I'm using vsftpd-2.0.7-5.1 for my FTPS server. I have enable ssl for the ftp connection in vsftpd.conf file. I have generate my certificate using this command:

Code:

openssl req -x509 -nodes -days 1825 -newkey rsa:1024 -keyout vsftpd.pem -out vsftpd.pem

and redirect the cert_file and private_file to those .pem file.
The problem is, my client still unable to connect to my FTPS server using core ftp client on windows, although I have sent them my public key which I generate using this command:

Code:

openssl x509 -in vsftpd.pem -out public.pem

Please tell me if I have done something wrong..

anyway here is my vsftpd.conf

Code:

write_enable=YES
dirmessage_enable=YES
nopriv_user=ftpsecure
local_enable=YES
local_umask=022
chroot_local_user=YES
anonymous_enable=NO
anon_world_readable_only=YES
syslog_enable=YES
connect_from_port_20=YES
pam_service_name=vsftpd
listen=YES
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/vsftpd.pem
ssl_enable=YES
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
pasv_min_port=30000
pasv_max_port=30100

Many thanks!

mpapet · 02-25-2011, 06:51 PM

Is the key signed? Does the ftp client actually DO public key tranfers? There is such a thing as incompatibility.

You need to get the FTP client and figure it out.

arfal · 02-27-2011, 12:02 PM

Hi, thanks for for your reply. Could you please give me a short tutorial how do I sign my key? Yes, core ftp lite software was able to do the public key transfer

moodah · 02-27-2011, 07:48 PM

Use an external business internet connection to connect to your ftp server to test. Off the top of my head, Filezilla lets you specify 'ftp, sftp, ftps and ftpes'.. FTPES will work with vsftp since that is how I tested vsftp when I set it up myself, though, I havent configured it to require the clients having the public key.

arfal · 03-01-2011, 01:28 AM

ftpes:// with filezilla works fine.. But my client still want my public key, I have no idea what program do they used to connect to my ftps server