這裏顯示兩個版本的差異處。
| Both sides previous revision 前次修改 下次修改 | 前次修改 | ||
|
service:proftpd [2008/05/17 22:26] wenpei |
service:proftpd [2008/12/16 20:13] (目前版本) wenpei |
||
|---|---|---|---|
| 行 1: | 行 1: | ||
| + | ====== proftpd 使用 TLS 加密 ====== | ||
| + | ===== 產生金鑰 ===== | ||
| + | openssl genrsa -out proftpd.key2 1024 | ||
| + | |||
| + | openssl req -new -x509 -days 3650 -key proftpd.key -out proftpd.crt | ||
| + | |||
| + | <code> | ||
| + | Country Name (2 letter code) [AU]:TW | ||
| + | State or Province Name (full name) [Some-State]:Taiwan | ||
| + | Locality Name (eg, city) []:Jhungli | ||
| + | Organization Name (eg, company) [Internet Widgits Pty Ltd]:SARS.tw | ||
| + | Organizational Unit Name (eg, section) []:FTP | ||
| + | Common Name (eg, YOUR name) []:sars.tw | ||
| + | Email Address []:username@domain.name | ||
| + | </code> | ||
| + | |||
| + | chmod go-r proftpd.key proftpd.crt | ||
| + | |||
| + | mv proftpd.key proftpd.crt /etc/ssl/certs/ | ||
| + | |||
| + | ===== 設定 tls.conf ===== | ||
| + | <code> | ||
| + | <IfModule mod_tls.c> | ||
| + | TLSEngine on | ||
| + | TLSLog /var/log/proftpd/tls.log | ||
| + | TLSProtocol SSLv23 | ||
| + | TLSRSACertificateFile /etc/ssl/certs/proftpd.crt | ||
| + | TLSRSACertificateKeyFile /etc/ssl/certs/proftpd.key | ||
| + | TLSVerifyClient off | ||
| + | TLSRequired on | ||
| + | TLSRenegotiate required off | ||
| + | </IfModule> | ||
| + | </code> | ||
| + | |||
| + | ===== 設定 proftpd.conf ===== | ||
| + | 在檔案中加入: | ||
| + | Include /etc/proftpd/tls.conf | ||
| + | |||
| + | 並檢查 modules.conf 中是否有: | ||
| + | LoadModule mod_tls.c | ||
| + | |||
| ====== 用 mysql 管理 proftpd 帳號 ====== | ====== 用 mysql 管理 proftpd 帳號 ====== | ||
| http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-SQL.html | http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-SQL.html | ||