Support

Installing your SSL Certificate on ProFTPD

Step one: Copy your certificate to file

You will receive an e-mail Networking4all with the attached zip file where the certificate can be found (ftp-yourdomainname-com.cer). When viewed in a text editor, your certificate will look something like:

-----BEGIN CERTIFICATE-----
MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF
UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAUAMF8xCzAJBgNVBAYTAlVTMSAw
(.......)
E+cFEpf0WForA+eRP6XraWw8rTN8102zGrcJgg4P6XVS4l39+l5aCEGGbauLP5W6
K99c42ku3QrlX2+KeDi+xBG2cEIsdSiXeQS/16S36ITclu4AADEAAAAAAAAA
-----END CERTIFICATE-----

Copy your Certificate into the directory that you will be using to hold your certificates. In this example we will use /etc/ftpd/. Both the public and private key files will already be in this directory. The private key used in the example will be labeled private.key and the public key will be ftp-yourdomainname-com.cer.

It is recommended that you make the directory that contains the private key file only readable by root.

Step two: Install the FTP-server

This is the certificate that starts Networking4all. You will need to install the Networking4all intermediate certificate in order for browsers to trust your certificate. The Networking4all intermediate certificate is attached to your email. In the Virtual Host settings for your site, in the proftpd.conf file, you will need to complete the following:

TLSEngine on
TLSLog /var/ftpd/tls.log
TLSProtocol SSLv3 TLSv1
TLSRequired off
TLSRSACertificateFile /etc/ftpd/ftp-hieruwdomeinnaam-nl.cer
TLSRSACertificateKeyFile /etc/ftpd/server.key
TLSCACertificateFile /etc/ftpd/root.cer
TLSVerifyClient off
TLSRenegotiate required off

Save your proftpd.conf file and restart ProFTPD.