Product:
Search Type:

How do I configure ProFTPd server to use TLS/SSL?

Article ID: 2207 
Last Review: Apr,07 2008
APPLIES TO:
  • Plesk for Linux/Unix

RESOLUTION

Plesk ProFTPd sever has compiled-in mod_tls.c module for SSL support ans SSL support can be configured in /etc/proftpd.conf for example in the following way:


 <IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/log/tls.log
    TLSProtocol SSLv23

    # Are clients required to use FTP over TLS?
    TLSRequired off

    # Server's certificate
    TLSRSACertificateFile /usr/local/psa/admin/conf/httpsd.pem
    TLSRSACertificateKeyFile /usr/local/psa/admin/conf/httpsd.pem

    # Authenticate clients that want to use FTP over TLS?
    TLSVerifyClient off

    # Allow SSL/TLS renegotiations when the client requests them, but
    # do not force the renegotations.  Some clients do not support
    # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
    # clients will close the data connection, or there will be a timeout
    # on an idle data connection.
    TLSRenegotiate required off
  </IfModule>


As values in TLSRSACertificateFile and TLSRSACertificateKeyFile otion you can use as Plesk certificate, for example /usr/local/psa/admin/conf/httpsd.pem as your own one.

See http://proftpd.org/docs/directives/linked/config_ref_mod_tls.html for available FTP SSL service configuration directives.

And here you can find some examples and FAQ:
http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html

Additional information

Note, that also such term as SFTP does exist. Actually it is SSH extension and has nothing common with FTP protocol or FTP server. See http://en.wikipedia.org/wiki/SSH_file_transfer_protocol for more information.
Keywords: sftp, fpts, ssh, ssl, ftp

Please provide feedback on this article

Did this article help you solve your issue?
Yes
No
Partially
I do not know yet
 
Strongly Agree   Strongly Disagree
  9 8 7 6 5 4 3 2 1
The article is easy to understand
The article is accurate
Additional Comments:
*Please provide us with your email address in case we need to contact you.
*Please type the code you can see.
* - required fields