debianforum.de

proftpd templete

SNIPPET_DESC:

Original proftpd

SNIPPET_CREATION_TIME:

10.07.2019 14:47:10

SNIPPET_PRUNE_TIME:

Unendlich

SNIPPET_TEXT:

1. #
2. # Proftpd sample configuration for FTPS connections.
3. #
4. # Note that FTPS impose some limitations in NAT traversing.
5. # See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html
6. # for more information.
7. #
8.  
9. <IfModule mod_tls.c>
10. #TLSEngine                               on
11. #TLSLog                                  /var/log/proftpd/tls.log
12. #TLSProtocol                             SSLv23
13. #
14. # Server SSL certificate. You can generate a self-signed certificate using
15. # a command like:
16. #
17. # openssl req -x509 -newkey rsa:1024 \
18. #          -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt \
19. #          -nodes -days 365
20. #
21. # The proftpd.key file must be readable by root only. The other file can be
22. # readable by anyone.
23. #
24. # chmod 0600 /etc/ssl/private/proftpd.key
25. # chmod 0640 /etc/ssl/private/proftpd.key
26. #
27. #TLSRSACertificateFile                   /etc/ssl/certs/proftpd.crt
28. #TLSRSACertificateKeyFile                /etc/ssl/private/proftpd.key
29. #
30. # CA the server trusts...
31. #TLSCACertificateFile                    /etc/ssl/certs/CA.pem
32. # ...or avoid CA cert and be verbose
33. #TLSOptions                      NoCertRequest EnableDiags
34. # ... or the same with relaxed session use for some clients (e.g. FireFtp)
35. #TLSOptions                      NoCertRequest EnableDiags NoSessionReuseRequired
36. #
37. #
38. # Per default drop connection if client tries to start a renegotiate
39. # This is a fix for CVE-2009-3555 but could break some clients.
40. #
41. #TLSOptions                                                     AllowClientRenegotiations
42. #
43. # Authenticate clients that want to use FTP over TLS?
44. #
45. #TLSVerifyClient                         off
46. #
47. # Are clients required to use FTP over TLS when talking to this server?
48. #
49. #TLSRequired                             on
50. #
51. # Allow SSL/TLS renegotiations when the client requests them, but
52. # do not force the renegotations.  Some clients do not support
53. # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
54. # clients will close the data connection, or there will be a timeout
55. # on an idle data connection.
56. #
57. #TLSRenegotiate                          required off
58. </IfModule>

Quellcode

Hier kannst du den Code kopieren und ihn in deinen bevorzugten Editor einfügen. PASTEBIN_DOWNLOAD_SNIPPET_EXPLAIN