[CentOS] FTPS setup problem

Guy Boisvert boisvert.guy at videotron.ca
Fri Dec 19 17:43:07 UTC 2008


Hi!

	I'm trying to figure out what's going wrong with a "simple" FTPS setup 
and VSFTPD.

	I saw references on Google and tried, and tried, and tried... without 
success.

	I'll start by explaining my situation: I have a WEB development server 
behind a firewall.  It's currently only for the intranet.  We now have 
an external company that will have to do a new website for us and we 
want them to access securely our development server.

	Internally, we access it with regular FTP (we use DreamWeaver 8).  In 
the references i saw, i'd just add the following lines and it is 
supposed to work:

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=YES
ssl_sslv3=NO
rsa_cert_file=/etc/vsftpd/vsftpd.pem



Here are the previous lines in my vsftpd config:

anonymous_enable=YES
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/vsftpd.chroot_list
pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES


I generated the PEM cert with the following command:

openssl req -x509 -nodes -days 365 -newkey rsa:1024  -keyout 
/etc/vsftpd/vsftpd.pem  -out /etc/vsftpd/vsftpd.pem


I tried to connect with FileZilla without luck.  I heard that FileZilla 
may have a problem with vsftpd in FTPS mode so i downloaded SmartFTP 
which i read should be able to connect.

When i try, i get this error message:

SSL/TLS client handshake failed (Error = 0x80090308)



Does anybody could give me a pointer on this?


Thanks in advance and happy holidays to everybody!


Guy Boisvert, ing
IngTegration inc.

_______________________________________________________________
Pre-Boxing Day Domain Sales: Hosting + Domain = US$4.95/year
Offer Ends: Dec 31, 2008.        http://www.doteasypromo.com


More information about the CentOS mailing list