Talk:Vsftpd

From Gentoo Linux Wiki

[edit] vsftp not working

Could someone who knows what the "caps" use-flag really does add a hint to http://gentoo-wiki.com/HOWTO_vsftpd, telling people to do an

echo "net-ftp/vsftpd caps" >> /etc/portage/package.use

before emerging this package?

[edit] Securing FTP

At first: Emerge vsftpd in a version greater then 2.0.1, e.g. like that:

ACCEPT_KEYWORDS="~x86" emerge -p =net-ftp/vsftpd-2.0.3

Now generate an SSL Cert, e.g. like that:

cd /etc/ssl/certs
openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/certs/vsftpd.pem -out /etc/ssl/certs/vsftpd.pem

You will be asked alot of Questions about your Company etc., as your Certificate is not a trusted one it doesn't really matter what you fill in. You will use this for encryption! If you plan to use this in a matter of trust get one from a CA like thawte, verisign etc.

Note that the certificate has to be rsa as dsa seems not to be supported (Please correct me if I'm wrong).

edit your /etc/vsftpd/vsftpd.conf like this:

ssl_enable=YES                          #this is important
# allow_anon_ssl=NO                     #choose what you like, if you accept anon-connections you may wnt to enable this<BR>
# force_local_data_ssl=NO               #choose what you like, it's a matter of performance i guess<BR>
force_local_logins_ssl=YES              #choose what you like

ssl_tlsv1=YES                           #you should at least enable this if you enable ssl...
ssl_sslv2=YES                           #choose what you like
ssl_sslv3=YES                           #choose what you like
rsa_cert_file=/etc/ssl/certs/vsftpd.pem #give the correct path to your currently generated *.pem file

Hope this helps

Niels Kalle

Edits: --Stargazer 08:40, 6 Jul 2005 (GMT) - Format Cleanup

[edit] /var/ftp

STRING OPTIONS

• local_root
• anon_root

in config file should point to the /var/ftp, instead of linking /home/ftp to /var/ftp