Certificate Installation: vsftpd

1. Combine your certificate and CA certificate(s) into one file (e.g. your.server.pem).
   Note: If you are unsure of how to do this, please use the following instructions: CSR Generation: Using OpenSSL


2. Move the file created, as a result of the previous step, to the location where you store certificates (Examples: /usr/share/ssl/certs/, /etc/ssl/certs/)


3. Move your private key, that you created when you generated your CSR, to the location where you store private keys. (e.g. /etc/ssl/certs/private/)


4. Update 'vsftpd.conf' in your favorite text-editor with:
   
   
   
   • rsa_cert_file = /path/to/your.server.pem
   • rsa_private_key_file = /path/to/your.key


5. Restart vsftpd.
   
   Examples:
   
   
   
   • /etc/init.d/vsftpd restart
   
   OR
   
   
   • /sbin/service/vsftpd restart
   
   OR
   
   
   • killall vsftpd
     vsftpd


6. Your vsftp server is now secured through SSL/TLS.

Related Articles

• manpage for vsftpd


• CSR Generation: Using OpenSSL