Ubuntu 22.04
Sponsored Link

FTP : ProFTPD Over SSL/TLS2022/05/16

Configure ProFTPD to use SSL/TLS.
[1] Create self-signed certificates.
However. if you use valid certificates like from Let's Encrypt or others, you don't need to create this one.
cd /etc/ssl/private

openssl req -x509 -nodes -newkey rsa:2048 -keyout proftpd.pem -out proftpd.pem -days 3650

Generating a RSA private key
writing new private key to 'proftpd.pem'
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [AU]:JP                            # country code
State or Province Name (full name) [Some-State]:Hiroshima       # State
Locality Name (eg, city) []:Hiroshima                           # city
Organization Name (eg, company) [Internet Widgits Pty Ltd]:GTS  # company
Organizational Unit Name (eg, section) []:Server World          # department
Common Name (e.g. server FQDN or YOUR name) []:www.srv.world    # server's FQDN
Email Address []:root@srv.world                                 # admin's email

chmod 600 proftpd.pem

[2] Configure ProFTPD.
vi /etc/proftpd/proftpd.conf
# line 143 : uncomment

Include /etc/proftpd/tls.conf
vi /etc/proftpd/tls.conf
# line 10-12 : uncomment and change

TLSEngine               on
TLSLog                  /var/log/proftpd/tls.log
TLSProtocol             TLSv1.3

# line 27, 28 : uncomment and specify your certificate

TLSRSACertificateFile                   /etc/ssl/private/proftpd.pem
TLSRSACertificateKeyFile                /etc/ssl/private/proftpd.pem

systemctl restart proftpd

FTP Client : Ubuntu
Configure FTP Client to use FTPS connection.
[3] Install FTP Client on Ubuntu and configure like follows.
vi ~/.lftprc
# create new

set ftp:ssl-auth TLS
set ftp:ssl-force true
set ftp:ssl-protect-list yes
set ftp:ssl-protect-data yes
set ftp:ssl-protect-fxp yes
set ssl:verify-certificate no
lftp -u ubuntu www.srv.world

lftp ubuntu@www.srv.world:~>
FTP Client : Windows
[4] For example of FileZilla on Windows, Open [File] - [Site Manager].
[5] Input connection information like follows, and for encryption field, select [Require explicit FTP over TLS].
[6] User's Password is required. Input it.
[7] If you set self-signed certificate, following warning is shown, it's no problem. Go next.
[8] If settings are OK, it's possible to connect to FTP server with FTPS like follows.
Matched Content