<!DOCTYPE html> <html> <head> </head> <body> <p>root@www05:~#<span style="color: #0000ff;"><strong><span style="background-color: #ffffff;"><a style="color: #ffff00;" href="http://www.server-world.info/en/command/html/cd.html"><span style="background-color: #ffffff; color: #0000ff;">cd</span></a> /etc/ssl/private</span></strong></span></p> <p><br />root@www05:/etc/ssl/private#</p> <p><span style="color: #0000ff;"><strong>openssl req -x509 -nodes -newkey rsa:1024 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pem</strong></span></p> <p>Generating a 1024 bit RSA private key<br />……++++++<br />…….++++++<br />writing new private key to '/etc/ssl/private/vsftpd.pem'<br />—–<br />You are about to be asked to enter information that will be incorporated<br />into your certificate request.<br />What you are about to enter is what is called a Distinguished Name or a DN.<br />There are quite a few fields but you can leave some blank<br />For some fields there will be a default value,<br />If you enter '.', the field will be left blank.<br />—–</p> <p><br />root@www05:/etc/ssl/private# <span style="color: #0000ff;"><strong><span style="background-color: #ffffff;"><a style="color: #ffff00;" href="http://www.server-world.info/en/command/html/chmod.html"><span style="background-color: #ffffff; color: #0000ff;">chmod</span></a> 600 vsftpd.pem</span></strong></span></p> <p><br /><span style="background-color: #ffffff; color: #000000;"> root@www05:/etc/ssl/private#</span><span style="color: #0000ff;"><strong><a style="color: #ffff00;" href="http://www.server-world.info/en/command/html/vi.html"><span style="color: #0000ff;">vi</span></a> /etc/vsftpd.conf</strong></span></p> <pre class="code-pre "><span style="color: #000000;">rsa_cert_file=/etc/ssl/private/vsftpd.pem</span></pre> <pre class="code-pre "><code>ssl_enable=YES allow_anon_ssl=NO force_local_data_ssl=YES force_local_logins_ssl=YES</code></pre> <pre class="code-pre "><code>ssl_tlsv1=YES ssl_sslv2=NO ssl_sslv3=NO</code></pre> <pre class="code-pre "><code>require_ssl_reuse=NO ssl_ciphers=HIGH</code></pre> <p><br /><br />root@www05:~# <strong><span style="color: #0000ff;">service vsftpd restart</span></strong></p> <p><strong><span style="color: #ff0000;">Generate a certificate using this syntax:</span></strong><br />openssl req -new -x509 -days 365 -nodes -out /etc/proftpd/ssl/proftpd.cert.pem -keyout /etc/proftpd/ssl/proftpd.key.pem<br /><br /></p> <p><span style="color: #0000ff;">rsa_cert_file=/etc/ssl/private/vsftpd.pem</span></p> </body> </html>
Subscribe
0 Comments
Oldest