Hallo Leute,
nach der Anleitung von Sven habe ich mir meine Keys für das TLS Modul nun endlich erstellen können. Ich habe die proftpd.conf auch nach dieser Anleitung angepasst bekomme aber beim Start folgende Fehlermeldung.
-No certificate files found!
- Fatal: unknown configuration directive '<IfModule>' on line 54 of '/etc/proftpd.conf'.
Das TLS MOdul ist mit eingebunden das sagt mir jedenfalls
Nach einem proftpd -l
Compiled-in modules:
mod_tls.c
Die Zeilen für TLS habe ich auch 1 zu 1 aus der Anleitung in meine proftp.conf eingetragen.
Hier mein proftpd.conf
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use. It establishes a single server
# and a single anonymous login. It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.
ServerName "Debian"
ServerType standalone
DeferWelcome off
ShowSymlinks on
MultilineRFC2228 on
DefaultServer on
ShowSymlinks on
AllowOverwrite on
TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200
DisplayLogin welcome.msg
DisplayFirstChdir .message
LsDefaultOptions "-l"
DenyFilter \*.*/
# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd off
# Port 21 is the standard FTP port.
Port 21
# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30
# Set the user and group that the server normally runs at.
User nobody
Group nogroup
# Normally, we want files to be overwriteable.
<Directory /*>
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022
AllowOverwrite on
</Directory>
<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/proftpd_tls.log
TLSProtocol TLSv1
TLSRequired off
TLSRSACertificateFile /etc/ssl/certs/server.crt
TLSRSACertificateKeyFile /etc/ssl/certs/server.key
TLSVerifyClient off
</IfModule>
# A basic anonymous configuration, no upload directories.
## <Anonymous ~ftp>
## User ftp
## Group nogroup
## # We want clients to be able to login with "anonymous" as well as "ftp"
## UserAlias anonymous ftp
##
## RequireValidShell off
##
## # Limit the maximum number of anonymous logins
## MaxClients 10
##
## # We want 'welcome.msg' displayed at login, and '.message' displayed
## # in each newly chdired directory.
## DisplayLogin welcome.msg
## DisplayFirstChdir .message
##
## # Limit WRITE everywhere in the anonymous chroot
## <Directory *>
## <Limit WRITE>
## DenyAll
## </Limit>
## </Directory>
##
## # Uncomment this if you're brave.
## # <Directory incoming>
## # # Umask 022 is a good standard umask to prevent new files and dirs
## # # (second parm) from being group and world writable.
## # Umask 022 022
## # <Limit READ WRITE>
## # DenyAll
## # </Limit>
## # <Limit STOR>
## # AllowAll
## # </Limit>
## # </Directory>
##
## </Anonymous>
Mein System ist Debian 3.0r3
Ich habe die Standard Pakete proftpd und openssl von Debian 3.0r3 installiert. Danke für eure Antworten.
