這裏顯示兩個版本的差異處。
Both sides previous revision 前次修改 下次修改 | 前次修改 | ||
service:proftpd [2008/05/17 22:26] wenpei |
service:proftpd [2008/12/16 20:13] (目前版本) wenpei |
||
---|---|---|---|
行 1: | 行 1: | ||
+ | ====== proftpd 使用 TLS 加密 ====== | ||
+ | ===== 產生金鑰 ===== | ||
+ | openssl genrsa -out proftpd.key2 1024 | ||
+ | |||
+ | openssl req -new -x509 -days 3650 -key proftpd.key -out proftpd.crt | ||
+ | |||
+ | <code> | ||
+ | Country Name (2 letter code) [AU]:TW | ||
+ | State or Province Name (full name) [Some-State]:Taiwan | ||
+ | Locality Name (eg, city) []:Jhungli | ||
+ | Organization Name (eg, company) [Internet Widgits Pty Ltd]:SARS.tw | ||
+ | Organizational Unit Name (eg, section) []:FTP | ||
+ | Common Name (eg, YOUR name) []:sars.tw | ||
+ | Email Address []:username@domain.name | ||
+ | </code> | ||
+ | |||
+ | chmod go-r proftpd.key proftpd.crt | ||
+ | |||
+ | mv proftpd.key proftpd.crt /etc/ssl/certs/ | ||
+ | |||
+ | ===== 設定 tls.conf ===== | ||
+ | <code> | ||
+ | <IfModule mod_tls.c> | ||
+ | TLSEngine on | ||
+ | TLSLog /var/log/proftpd/tls.log | ||
+ | TLSProtocol SSLv23 | ||
+ | TLSRSACertificateFile /etc/ssl/certs/proftpd.crt | ||
+ | TLSRSACertificateKeyFile /etc/ssl/certs/proftpd.key | ||
+ | TLSVerifyClient off | ||
+ | TLSRequired on | ||
+ | TLSRenegotiate required off | ||
+ | </IfModule> | ||
+ | </code> | ||
+ | |||
+ | ===== 設定 proftpd.conf ===== | ||
+ | 在檔案中加入: | ||
+ | Include /etc/proftpd/tls.conf | ||
+ | |||
+ | 並檢查 modules.conf 中是否有: | ||
+ | LoadModule mod_tls.c | ||
+ | |||
====== 用 mysql 管理 proftpd 帳號 ====== | ====== 用 mysql 管理 proftpd 帳號 ====== | ||
http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-SQL.html | http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-SQL.html |