Unable to enable TLS

Discussion in 'Installation/Configuration' started by Delcroix, Feb 25, 2024.

  1. Delcroix

    Delcroix New Member

    Hello, first of all I apologize if I posted in the wrong place.

    There you go, I installed ISPConfig on Ubuntu 22.4 with NGINX, the installation went perfectly, no problems.
    Until the use of FTP.
    The account creation works and I can connect with the created account, but only via port 21.
    Once connected with Filezilla, I have a message for the certificate then another message informing me that the connection is not secure.
    Of course, I tried to connect with port 990, but I couldn't connect.
    Regarding my configuration.
    UFW and ISPConfig have tcp ports 21, 990 and ports 40110:40210 open.
    I looked in the pure-ftpd.conf file, I have the directives:
    PassivePortRange 40110 40210
    TLSCipherSuite HIGH
    TLS2
    CertFile /etc/ssl/private/pure-ftpd.pem
    And strange thing if I activate the "TLSCertificateFile" file, present in " /etc/pure-ftpd/conf/" this prevents Pure FTP from starting, yet inside, I put the certificate url: / etc/ssl/private/pure-ftpd.pem

    In short, I'm lost, I don't see the solution because, if I look at the messages given via ""systemctl status pure-ftpd-mysql.service", I get this:
    Feb 25 21:45:45 domaine.com systemd[1]: Starting pure-ftpd-mysql.service...
    Feb 25 21:45:45 domaine.com pure-ftpd-mysql[55387]: Starting ftp server:
    Feb 25 21:45:45 domaine.com pure-ftpd-mysql[55395]: /usr/sbin/pure-ftpd-wrapper: Invalid configuration file /etc/pure-ftpd/conf/TLSCertificateFile: No corresponding directive
    Feb 25 21:45:45 domaine.com systemd[1]: pure-ftpd-mysql.service: Control process exited, code=exited, status=255/EXCEPTION
    Feb 25 21:45:45 domaine.com systemd[1]: pure-ftpd-mysql.service: Failed with result 'exit-code'.
    Feb 25 21:45:45 domaine.com systemd[1]: pure-ftpd-mysql.service: Unit process 54358 (pure-ftpd-mysql) remains running after unit stopped.
    Feb 25 21:45:45 domaine.com systemd[1]: pure-ftpd-mysql.service: Unit process 54359 (pure-ftpd-mysql) remains running after unit stopped.
    Feb 25 21:45:45 domaine.com systemd[1]: Failed to start pure-ftpd-mysql.service.

    There you go, if anyone has the beginnings of an answer, that would be great, thank you.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The passive port range is not set in that file. pure-ftpd on Ubuntu uses files in conf directory.

    https://www.faqforge.com/linux/dist...ange-in-pure-ftpd-on-debian-and-ubuntu-linux/

    I am not sure how you installed ISPConfig, as everything is normally working out of the box when using the auto-installer, which also includes an SSL cert for pure-ftpd: https://www.howtoforge.com/ispconfig-autoinstall-debian-ubuntu/ Maybe you did not use the auto installer but configured everything manually?

    Btw, you can find a complete list of config options for pure-ftpd on Ubuntu at the end of this guide:

    https://www.howtoforge.com/installing-pure-ftpd-on-ubuntu-22-04/

    and according to that list, there is no such config file option /etc/pure-ftpd/conf/TLSCertificateFile, which explains why you get an error.
     
    ahrasis likes this.
  3. Delcroix

    Delcroix New Member

    Hello, thank you for your message.
    First of all, I didn't indicate it, but the file does contain the passive ports.
    PassivePortRange 40110 40210

    For the installation in fact, I followed the ubuntu, nginx guide, available on Howtoforge

    For the functions, I looked at the pureftp guide, but nothing changes the problem.

    I wonder if this is not related to DNS management, because I use a domain name for example: domain.com on an IP, for example 260.268.25.25, but the server is on another IP 265.25. 25.20 pointing to the ispconfig.domain.com subdomain.

    it works with other services, but I wonder if it does not interfere with SSL and therefore TLS

    ps: sorry, I am not giving a link, because the forum tells me that I am not eligible for this function.
     

Share This Page