Ubuntu: How to Enable tls/ssl in proftpd

[Diablo925]

How to Enable tls/ssl in proftpd

Make folder to SSL

1: Create SSL Folder

Code:

mkdir /etc/proftpd/ssl

2: Generate ssl certificate

Code:

openssl req -new -x509 -days 365 -nodes -out /etc/proftpd/ssl/proftpd.cert.pem -keyout /etc/proftpd/ssl/proftpd.key.pem

output

Code:

Generating a 2048 bit RSA private key
.....................+++
..........+++
writing new private key to 'proftpd.key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----

Code:

Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:New York
Locality Name (eg, city) []:NYC
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Name of company
Organizational Unit Name (eg, section) []: just press enter
Common Name (e.g. server FQDN or YOUR name) []: website name example.com
Email Address []:Email

3: Enable TLS In ProFTPd

edit proftpd.conf

Code:

nano /etc/proftpf/proftpd.conf

on liste line add

Code:

Include /etc/proftpd/ssl.conf

save and exit

4: make ssl.conf

Code:

nano /etc/proftpd/ssl.conf

add

Code:

<IfModule mod_dso.c>
   LoadModule mod_tls.c
</IfModule>

<IfModule mod_tls.c>
   TLSEngine                  on
   TLSLog                     /var/log/proftpd/tls.log
   TLSProtocol                SSLv23
   TLSOptions                 NoCertRequest AllowClientRenegotiations NoSessionReuseRequired
   TLSRSACertificateFile      /etc/proftpd/ssl/proftpd.cert.pem
   TLSRSACertificateKeyFile   /etc/proftpd/ssl/proftpd.key.pem
   TLSVerifyClient            off
   TLSRequired                on
</IfModule>

save and exit

5: restart proftpd

Code:

/etc/init.d/proftpd restart

now you can use tls/ssl

in filezilla type ftps://website.tld

[scriptcode]

Nice Tutorial. Helped me a lot. BUT: There is an error in your tutorial:

Code:

nano /etc/proftpf/proftpd.conf

This Path is wrong: The proftpd.conf can be only found under /etc/proftp/proftpd.conf (without the f). I think it is a literal error.

Best regards,

Felix

[iraqiboy90]

Thanks for the post.
Installed on Centos 7 and working fine so far.
Regarding the paths on Centos 7; a folder for proftpd does not exist, so I had to create one before being able to create the ssl folder