Trouble creating and using rsa keys for vsftpd on FedoraCore4.

hunterhunter · 03-26-2006, 05:28 PM

I tried the following commands.
openssl genrsa -des3 -out vsftpd.pem 1024

I specified where the file exists in the vsftpd.conf file.
Still nothing.

I'm not sure if I'm creating these keys correctly. I am a Linux novice. Details would be appreciated, especially if somebody has used ssl with vsftpd.

I also tried.
openssl req -x509 -nodes -newkey rsa:1024 -keyout /etc/ssl/private/vsftpd.pem -out

vsftpd still outputs this error
500 OOPS: SSL: cannot load RSA certificate

I really need some help here!

Thanks!

jschiwal · 03-26-2006, 07:13 PM

I think that the problem may be in the permissions of the vsftp.pem file. Or vsftp is chrooted and you need to copy the file to the jailed etc/ directory. I don't know whether vsftp will start out reading from the /etc directory as the root user, and then demote itself as a vsftp system user. You will need to read the documentation.

Some programs like ssh will refuse to run if the permissions allow anyone to read the private key.
This could be the cause of the "cannot load RSA certificate" message.

hunterhunter · 03-27-2006, 08:20 AM

I had to add it to xinetd. Once it launched from there then it was fine. Now I'm getting unable to bind to ipv4 socket. I have to add one more virtual address to the machine, change the listen directive in vsftpd.conf and I should be good to go.

If I have any more problems I'll post here.

Thanks!