FTPS otherwise called FTPES, FTP-SSL is an extension to the commonly used File Transfer Protocol (FTP) that adds support for the Transport Layer Security (TLS) and the Secure Sockets Layer (SSL) cryptographic protocols. FTP is essentially a fairly unstable protocol. Add TLS support to prevent your sessions from being vulnerable to man-in-the-middle attacks.
- Configureing the pure-ftpd
# vi /etc/pure-ftpd.conf
Set TLS to 0 if you are not to allow TLS (only FTP );
Set TLS to 1 if you want to allow FTP and TLS sessions ;
Set TLS to 2 if you want to accept TLS sessions only ( No FTP);
Please Uncomment the two lines below
Please save the altered configuration file.
- Please create the SSL certificate for TLS
> Please create the required directory to save the SSL certificate
State or Province Name (full name) []: <-- Please enter your State or Province Name.
Locality Name (eg, city) [Default City]: <-- Please enter your City.
Organization Name (eg, company) [Default Company Ltd]: <-- Please enter your Organization Name (e.g., the name of your company).
Organizational Unit Name (eg, section) []:<-- Please enter your Organizational Unit Name (e.g. "IT Department").
Common Name (eg, your name or your server's hostname) []:<-- Please enter the Fully Qualified Domain Name of the system (e.g. "server1.example.com").
# mkdir -p /etc/ssl/private/
> Plesae generate the SSL certificate as follows:
# openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
# openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
Country Name (2 letter code) [XX]: <-- Please enter your Country Name (e.g., "DE").
State or Province Name (full name) []: <-- Please enter your State or Province Name.
Locality Name (eg, city) [Default City]: <-- Please enter your City.
Organization Name (eg, company) [Default Company Ltd]: <-- Please enter your Organization Name (e.g., the name of your company).
Organizational Unit Name (eg, section) []:<-- Please enter your Organizational Unit Name (e.g. "IT Department").
Common Name (eg, your name or your server's hostname) []:<-- Please enter the Fully Qualified Domain Name of the system (e.g. "server1.example.com").
Email Address []:<-- Please enter your Email Address.
- Secure the certificate
#chmod 600 /etc/ssl/private/pure-ftpd.pem
- Please restart PureFTPd
# systemctl restart pure-ftpd.service
