#1 17. Juli 2007 Hi ich versuche grad einen ftp auszusetzten was ich auch schon mal vor ungefähr einen halben jahr geschafft hatte habe auch noch meine late config gefunden doch irgendwas klappt da mit nicht mehr denke das ist ein Problemm mit ssl und ich komm nicht weiter... Folgende Fehlermeldung habe ich: Code: proftpd - Fatal: unknown configuration directive 'TLSEngine' on line 37 of '/etc/proftpd/proftpd.conf' hier die config: Code: ServerName "Debian" ServerType standalone DeferWelcome on MultilineRFC2228 on DefaultServer on ShowSymlinks on DisplayLogin welcome.msg DisplayFirstChdir .message ListOptions "-l" #DisplayLogout /etc/end2.msg #DisplayFistChdir .message #ListOptions "-l" DenyFilter \*.*/ # Uncomment this if you are using NIS or LDAP to retrieve passwords: #PersistentPasswd off # Uncomment this if you would use TLS module: TLSEngine on #TLSLog /var/log/tls.log TLSOptions NoCertRequest TLSRSACertificateFile /etc/ssl/certs/proftpd.cert.pem TLSRSACertificateKeyFile /etc/ssl/certs/proftpd.key.pem TLSVerifyClient off TLSRequired off # Uncomment this if you would use quota module: #Quotas on # Uncomment this if you would use ratio module: #Ratios on # Port 21 is the standard FTP port. Port 21 # Set the user and group that the server normally runs at. User max Group max # Umask 022 is a good standard umask to prevent new files and dirs # (second parm) from being group and world writable. Umask 022 022 # Normally, we want files to be overwriteable. AllowOverwrite on # Delay engine reduces impact of the so-called Timing Attack described in # [url]http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02[/url] # It is on by default. #DelayEngine off # A basic anonymous configuration, no upload directories. # <Anonymous ~ftp> # User ftp # Group nogroup # # We want clients to be able to login with "anonymous" as well as "ftp" # UserAlias anonymous ftp # # Cosmetic changes, all files belongs to ftp user # DirFakeUser on ftp # DirFakeGroup on ftp # # RequireValidShell off # # # Limit the maximum number of anonymous logins # MaxClients 10 # # # We want 'welcome.msg' displayed at login, and '.message' displayed # # in each newly chdired directory. DisplayLogin welcome.msg DisplayFirstChdir .message # # # Limit WRITE everywhere in the anonymous chroot # <Directory *> # <Limit WRITE> # DenyAll # </Limit> # </Directory> # # # Uncomment this if you're brave. # # <Directory incoming> # # # Umask 022 is a good standard umask to prevent new files and dirs # # # (second parm) from being group and world writable. # # Umask 022 022 # # <Limit READ WRITE> # # DenyAll # # </Limit> # # <Limit STOR> # # AllowAll # # </Limit> # # </Directory> # # </Anonymous> <Global> DefaultChdir /share DefaultRoot /share DefaultRoot /share RootLogin on LoginPasswordPrompt on AllowOverwrite on <Limit /etc/init.d/proftpd restart> </Limit> AllowRetrieveRestart on MaxClients none MaxClientsPerHost none PassivePorts 1024 65535 DeleteAbortedStores on AllowForeignAddress on AllowStoreRestart on TransferLog NONE DisplayLogin /etc/welcome.msg </Global> RLimitCPU max max #RLimitMemory max max RLimitOpenFiles max max habe proftpd-pgsql installier und folgenden befehl für den ssl kram ausgführt Code: openssl req -new -x509 -days 40000 -nodes -out /etc/ssl/certs/proftpd.cert.pem -keyout /etc/ssl/certs/proftpd.key.pem Kann mir jemand helfen?, danke schon mal im vorraus + Multi-Zitat Zitieren
#2 17. Juli 2007 AW: proftpd - ssl problem ProFTPD: HowTo: SFTP (TLS, verschlüsseltes FTP) genau so machen, wies da steht, dann gehts auch. + Multi-Zitat Zitieren