FTPS with VSFTP and OpenSSL

Discussion in 'Server Operation' started by Johan Strange, Jul 29, 2009.

  1. Johan Strange

    Johan Strange New Member

    Hi,

    I have set up VSFTP to use ftps , the box is old running FC6. I have added the following lines in vsftpd.conf:

    ssl_enable=YES
    allow_anon_ssl=NO
    ssl_sslv2=YES
    ssl_sslv3=YES
    ssl_tlsv1=YES
    ssl_ciphers=DES-CBC3-SHA
    rsa_cert_file=/etc/vsftpd/vsftpd.pem
    force_local_data_ssl=YES
    force_local_logins_ssl=YES

    I have generated a certificate using OpenSSL:

    openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem

    I have accepted the untrusted cert in FireFTP and can connect securely

    220 Banner
    AUTH TLS
    234 Proceed with negotiation.
    PBSZ 0
    200 PBSZ set to 0.
    USER ftptest
    331 Please specify the password.
    PASS (password not shown)
    230 Login successful.
    FEAT
    211-Features:
    AUTH SSL
    AUTH TLS
    EPRT
    EPSV
    MDTM
    PASV
    PBSZ
    PROT
    REST STREAM
    SIZE
    TVFS
    211 End
    PWD
    257 "/"
    TYPE A
    200 Switching to ASCII mode.
    PROT P
    200 PROT now Private.
    PASV
    227 Entering Passive Mode
    LIST

    I then do not get a directory listing, the account has read write and execute rights of the directory. After a while the connection drops and I get:

    521 Data connections must be encrypted.
    : //

    I thought I had done everything I needed but clearly I have missed a step. Does anyone have any suggestions?
     

Share This Page