[BlueOnyx:04958] Re: Secure FTP options with BX?

Michael Stauber mstauber at blueonyx.it
Mon Jul 5 18:16:50 -05 2010


Hi Jeff,

> The TLS Auth thing, I take it that is a conf. file hack - or should I be
> seeing these settings under the FTP service in the GUI? I don't see any.

It's a modification to /etc/proftpd.conf and it's enabled by default in our 
build.

It is this section in there:

# TLS
<IfModule mod_tls.c>
   TLSEngine on
   TLSLog /var/log/proftpd/tls.log 
   TLSRequired off
   TLSRSACertificateFile /etc/pki/dovecot/certs/dovecot.pem
   TLSRSACertificateKeyFile /etc/pki/dovecot/private/dovecot.pem
   TLSVerifyClient off
   TLSOptions NoCertRequest
   TLSRenegotiate required off
</IfModule>

> I would also like to force TLS, is that possible?

I think you can force it by setting "TLSRequire" from "off" to "on".

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list