9thport ruby, rails, sysadmin, os x, and other stuff

proftpd with ssl and fxp

After you have installed your awesome Linux distribution, you might be looking to use a protocol for allowing users be able to update content on the box. I have chosen to use ProFTPD because of its features of setting user and group permissions based on directory patterns in its config file. Unfortunetlly, the user and password information are broadcasted in the clear across the data packets. Never Fear!! SSL is here!

Configure ProFTPd

1. mkdir /etc/proftpd/ssl
2. openssl req -new -x509 -days 365 -nodes -out /etc/proftpd/ssl/proftpd.cert.pem -keyout /etc/proftpd/ssl/proftpd.key.pem
3. fill in info for the cert
4. enable TLS by adding the following lines in proftpd.conf and then restart:

<IfModule mod_tls.c>
TLSEngine                  on
TLSLog                     /var/log/proftpd/tls.log
TLSProtocol                SSLv23
TLSOptions                 NoCertRequest
TLSRSACertificateFile      /etc/proftpd/ssl/proftpd.cert.pem
TLSRSACertificateKeyFile   /etc/proftpd/ssl/proftpd.key.pem
TLSVerifyClient            off
TLSRequired                off
</IfModule>