Re: vsftpd and TLS/SSL

On Fri, Mar 10, 2006 at 08:32:48AM -0500, Anthony J Placilla wrote:
> Enterprise 3, update 6
> 
> vsftpd-1.2.1-3E.1
> 
> Checking the relevant files & going through the changelog seems to
> indicate that this version does not do TLS/SSL for FTP.
> 
> For various business reasons I need an FTP server that does that. The
> SFTP subset of SSH is *not* an option (don't ask)

We went with the commercial Tectia SSH server from SSH Communications
because we needed chroot functionality and the stubborn openssh
developers don't seem to want to implement that.

> The maintainers site seems to indicate that TLS/SSL was not available
> until version 2.0.x
> (ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.0.4/FAQ)
> 
> Now if I'm missing something please apply clue.
> Will I need to recompile from a newer SRPM to get that functionality?

RHEL 4 includes vsftp 2.0.1.5.  You can go to RHN, search for the
package, and download the source tarball.  It will hopefully recompile
on RHEL 3.

> Can someone suggest an alternative ftp daemon that handles tls/ssl if
> I'm barking up the wrong tree?

The definitive source for FTP TLS/SSL:

http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html

For FTP services, we're using ProFTPd but the best tls/ssl support is in
a release candidate which we haven't rolled out into production yet.

        .../Ed

-- 
Ed Wilts, RHCE
Mounds View, MN, USA
mailto:[email protected]
Member #1, Red Hat Community Ambassador Program

--
Taroon-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/taroon-list