Index: [Article Count Order] [Thread]

Date:  Wed, 28 May 2008 10:31:01 -0700
From:  "Doug Harvey" <ohgoodiee (at mark) gmail.com>
Subject:  [coba-e:13107] Re: FTP - TLS/SSL Support? - Answer
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <483d95aa.1b018e0a.79e8.ffffa3eb (at mark) mx.google.com>
In-Reply-To:  <483D8AF4.4000008 (at mark) dogsbody.org>
X-Mail-Count: 13107

I'm curious about the certs too and agree, good work.

Doug
Sleepycathosting.com
 

-----Original Message-----
From: Dogsbody [mailto:dan (at mark) dogsbody.org] 
Sent: Wednesday, May 28, 2008 9:40 AM
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:13106] Re: FTP - TLS/SSL Support? - Answer


>> Wanted to check real quick if there is a way to easily enable SSL/TLS 
>> support in the built in FTP server that comes with the BlueQuartz 
>> installation.
>
> Well I had no takers to help me figure this out so I played around today 
> and figured out how to add SSL/TLS support to the built in proftpd 
> server. For those interested in the instructions I created a blog which 
> I will begin to add these types of things to. You can find my first how 
> to here.
> 
> http://coding.infoconex.com/post/BlueQuartz-enabling-SSLTLS-Support.aspx
> 
> Please let me know if you find anything wrong with the instructions.

This is really interesting!!  I have been meaning to play around with 
this for ages but have no time and always ended up using SCP instead 
anyway.  I have a couple of questions/comments if I may??


1) Instead of creating your own certificate why not just use the same 
one as the GUI/sendmail/dovecot uses?  It took some hunting around for 
the correct files but this looks like it works...

TLSRSACertificateFile /etc/admserv/certs/certificate
TLSRSACertificateKeyFile /etc/admserv/certs/key


2) In the past I have edited proftpd.conf and my changes have been 
overwritten.  Admittedly this was years ago so things have probably 
changed now but can someone confirm that changes to proftpd.conf will 
no longer be lost?


Nice work

Dan