proftpd - ssl problem

Dieses Thema im Forum "Linux & BSD" wurde erstellt von avenger2099, 17. Juli 2007 .

Schlagworte:
  1. 17. Juli 2007
    Hi ich versuche grad einen ftp auszusetzten was ich auch schon mal vor ungefähr einen halben jahr geschafft hatte habe auch noch meine late config gefunden doch irgendwas klappt da mit nicht mehr denke das ist ein Problemm mit ssl und ich komm nicht weiter...

    Folgende Fehlermeldung habe ich:

    Code:
    proftpd - Fatal: unknown configuration directive 'TLSEngine' on line 37 of '/etc/proftpd/proftpd.conf'

    hier die config:

    Code:
    ServerName "Debian"
    ServerType standalone
    DeferWelcome on
    
    MultilineRFC2228 on
    DefaultServer on
    ShowSymlinks on
    
    
    DisplayLogin welcome.msg
    DisplayFirstChdir .message
    ListOptions "-l"
    
    
    #DisplayLogout /etc/end2.msg
    #DisplayFistChdir .message
    #ListOptions "-l"
    
    DenyFilter \*.*/
    
    # Uncomment this if you are using NIS or LDAP to retrieve passwords:
    #PersistentPasswd off
    
    # Uncomment this if you would use TLS module:
    TLSEngine on
    #TLSLog /var/log/tls.log
    TLSOptions NoCertRequest
    TLSRSACertificateFile /etc/ssl/certs/proftpd.cert.pem
    TLSRSACertificateKeyFile /etc/ssl/certs/proftpd.key.pem
    TLSVerifyClient off
    TLSRequired off
    
    
    # Uncomment this if you would use quota module:
    #Quotas on
    
    # Uncomment this if you would use ratio module:
    #Ratios on
    
    # Port 21 is the standard FTP port.
    Port 21
    
    
    # Set the user and group that the server normally runs at.
    User max
    Group max
    
    # Umask 022 is a good standard umask to prevent new files and dirs
    # (second parm) from being group and world writable.
    Umask 022 022
    # Normally, we want files to be overwriteable.
    AllowOverwrite on
    
    # Delay engine reduces impact of the so-called Timing Attack described in
    # [url]http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02[/url]
    # It is on by default.
    #DelayEngine off
    
    # A basic anonymous configuration, no upload directories.
    
    # <Anonymous ~ftp>
    # User ftp
    # Group nogroup
    # # We want clients to be able to login with "anonymous" as well as "ftp"
    # UserAlias anonymous ftp
    # # Cosmetic changes, all files belongs to ftp user
    # DirFakeUser on ftp
    # DirFakeGroup on ftp
    #
    # RequireValidShell off
    #
    # # Limit the maximum number of anonymous logins
    # MaxClients 10
    #
    # # We want 'welcome.msg' displayed at login, and '.message' displayed
    # # in each newly chdired directory.
     DisplayLogin welcome.msg
     DisplayFirstChdir .message
    #
    # # Limit WRITE everywhere in the anonymous chroot
    # <Directory *>
    # <Limit WRITE>
    # DenyAll
    # </Limit>
    # </Directory>
    #
    # # Uncomment this if you're brave.
    # # <Directory incoming>
    # # # Umask 022 is a good standard umask to prevent new files and dirs
    # # # (second parm) from being group and world writable.
    # # Umask 022 022
    # # <Limit READ WRITE>
    # # DenyAll
    # # </Limit>
    # # <Limit STOR>
    # # AllowAll
    # # </Limit>
    # # </Directory>
    #
    # </Anonymous>
    <Global>
    DefaultChdir /share
    DefaultRoot /share
    DefaultRoot /share
    RootLogin on
    LoginPasswordPrompt on
    AllowOverwrite on
    <Limit /etc/init.d/proftpd restart>
    </Limit>
    AllowRetrieveRestart on
    MaxClients none
    MaxClientsPerHost none
    PassivePorts 1024 65535
    DeleteAbortedStores on
    AllowForeignAddress on
    AllowStoreRestart on
    TransferLog NONE
    DisplayLogin /etc/welcome.msg
    </Global>
    RLimitCPU max max
    #RLimitMemory max max
    RLimitOpenFiles max max

    habe proftpd-pgsql installier

    und folgenden befehl für den ssl kram ausgführt

    Code:
    openssl req -new -x509 -days 40000 -nodes -out /etc/ssl/certs/proftpd.cert.pem -keyout /etc/ssl/certs/proftpd.key.pem


    Kann mir jemand helfen?, danke schon mal im vorraus
     
  2. 17. Juli 2007
    AW: proftpd - ssl problem

    ProFTPD: HowTo: SFTP (TLS, verschlüsseltes FTP)
    genau so machen, wies da steht, dann gehts auch.
     
  3. Video Script

    Videos zum Themenbereich

    * gefundene Videos auf YouTube, anhand der Überschrift.