TLS/SSL support with ProFTPd

[ebradsha]

I've been trying to get TLS/SSL enabled on ProFTPd, but with every attempt I make I'm tharwarted with the usual FTP client error message:

220 ProFTPD 1.2.8 Server (ProFTPD) [censored.net]
AUTH TLS
500 AUTH not understood

I've scoured this forums and other places, but I haven't been able to find a standard procedure to enable TLS support on ProFTPd. Does anyone have a solution for this problem of mine?

Thanks in advance for any replys.

[ebradsha]

I do have the following entries in my proftpd.conf

<IfModule mod_tls.c>
TLSEngine on
TLSProtocol TLSv1
TLSRequired off
TLSRSACertificateFile /etc/ftpd-rsa.pem
TLSRSACertificateKeyFile /etc/ftpd-rsa-key.pem
TLSVerifyClient off
</IfModule>

[markie]

Originally posted by ebradsha
I do have the following entries in my proftpd.conf

<IfModule mod_tls.c>
TLSEngine on
TLSProtocol TLSv1
TLSRequired off
TLSRSACertificateFile /etc/ftpd-rsa.pem
TLSRSACertificateKeyFile /etc/ftpd-rsa-key.pem
TLSVerifyClient off
</IfModule>

Is the account Jailed? Check to make sure the account does not have JAILSHELL set in manage jailed accounts in WHM. TLS does not work if the account is jailed.

[ebradsha]

Nope, I have root access to this server, and the person who's trying to connect via ssl FTP has a regular shell.

[markie]

Originally posted by ebradsha
Nope, I have root access to this server, and the person who's trying to connect via ssl FTP has a regular shell.

Make sure that users account is not jailed. Sometimes even if it says its not jailed it is. A bug!

[ebradsha]

I checked by logging into their shell, it's definently not jailed. The server they were on before only have them a jailed shell and they were still able to use TLS/SSL upon logging into their FTP.

[markie]

On Cpanel i have never been able to us it if my account was jailed. Search the forums. TLS/SSL has not been implamented via Jailshell and you will find many requests for it. I personally unjailed my own account on my server and i had no issue with logging in but it did give me access to roam my entire server directories and this did not look like a great option to give others.

[ebradsha]

Ok... this problem doesn't have anything to do with a jailed shell because no one has a jailed shell on this server. Correct me if I'm mistaken.

[markie]

I though you were referring to sftp via SSL.

[ebradsha]

Oh ok, now I understand. Nah I'm just trying to get TLS/SSL supprt enabled for regular FTP.

[tcwebguy]

Any resolution to this issue?

I get the error, but the connection seems to be accepted. Does that mean that the connection is not secure?