02-20-2016
Does vsftpd support user access with client certificate with priv/pub key + vsftpd certificate?
I am trying to setup all certificate based client-server environment in Linux using
vsftpd and
curl with
openssl.
I would like to make a user access with
vsftpd certificate and user own client certificate (self-signed) with private/public key.
I don't see google posts about the my plan of setup client certificate (self-signed) with private/public key.
Does
vsftpd allow it?
Last edited by Don Cragun; 02-22-2016 at 04:46 PM..
Reason: Add ICODE tags
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hello!
I have setup a site to which users authenticate against with openssl certificates.
Everything works just fine, be I wish to be able to redirect to a error page with instructions instead of displaying the default error page that firefox displays.
How to? I got nothing out of google...... (6 Replies)
Discussion started by: Esaia
6 Replies
2. UNIX for Dummies Questions & Answers
Is there a way i can only force SSL encryption if they connect from outside our network OR allow certain IP's to connect without using encryption? (0 Replies)
Discussion started by: mokachoka
0 Replies
3. UNIX for Dummies Questions & Answers
Hi all
Ive setup a VSFTPD server and im forcing SSL encryption. I have made a key and it works perfectly.
I have a client who wants to connect but is using software that needs the key to be added before he can connect.
Does he need me to send the key i created and that the VSFTPD.conf... (0 Replies)
Discussion started by: mokachoka
0 Replies
4. Red Hat
Hi Friends,
I am trying to configure vsftpd server 2.0.5 on rhel5 64 bit installation.
I am getting an error when initiating an ssl connection.
I am using filezilla 3.0 ftp client.
Client is specifically using passive mode connection.
I can see the client is able to connect to the server,... (0 Replies)
Discussion started by: arumon
0 Replies
5. UNIX for Dummies Questions & Answers
Hi,
I am trying to call a http soap webservice using curl command , I have tried the below option but I am getting a failure .
curl -H "Content-Type: text/xml; charset=utf-8" -H SOAPAction:" -d @Request.xml -X POST... (1 Reply)
Discussion started by: IshuGupta
1 Replies
6. UNIX for Dummies Questions & Answers
I have to call a webservice , I need to pass the static request from Unix which should have message signing details in the soap header . I am using cURL command for this. I do not have java , I need to do it through Unix only .
Below is the kind of Soap envelop I want to wrap around my request .... (0 Replies)
Discussion started by: IshuGupta
0 Replies
7. UNIX for Dummies Questions & Answers
HI
I have set up vsftp on my Red hat server.
Chroot has been set up to control access to each user and folder directories.
This all works fine.
But i have one directory where i want to chroot but ensure that the ftp access is read only.
Any help appreciated
thanks
Treds (1 Reply)
Discussion started by: treds
1 Replies
8. UNIX for Beginners Questions & Answers
We have a HPUX server that talks to a web service. We recently updated the web service certificate to a new SHA256 cert that has an updated intermediate cert. The HPUX server is now unable to connect because it cannot validate the cert chain due to it not having the new intermediate CA cert.
I... (0 Replies)
Discussion started by: techmattr
0 Replies
9. Red Hat
I'm wondering if vsftpd supports user subcommand?
I found I can't switch user after ftp login.
Maybe someone can give me a certain answer.
I always got the message as below,
I enabled log_ftp_protocol=YES and checked the vsftpd.log,
it didn't help much actually. The log file only... (6 Replies)
Discussion started by: bestard
6 Replies
10. Programming
Hello Team,
I have to verify the Client server certificate validation in HTTPS request(SSL hand shake before the actual HTTPS post request), And tried various ways and failed to verify it successfully.
here are the trials and errors,
resp = requests.post(url, req, verify=True, timeout=5,... (0 Replies)
Discussion started by: chandana.hs
0 Replies
LEARN ABOUT DEBIAN
shib-keygen
SHIB-KEYGEN(8) Shibboleth SHIB-KEYGEN(8)
NAME
shib-keygen - Generate a key pair for a Shibboleth SP
SYNOPSIS
shib-keygen [-bf] [-e entity-id] [-g group]
[-h hostname] [-o output-dir] [-u user] [-y years]
DESCRIPTION
Generate a self-signed X.509 certificate for a Shibboleth SP. By default, the certificate will be for the local fully-qualified (as
returned by "hostname --fqdn") hostname. An entity ID can be specified with the -e flag. The openssl command-line client is used to
generate the key pair. By default, the public certificate will be created in /etc/shibboleth/sp-cert.pem and the private key in
/etc/shibboleth/sp-key.pem.
OPTIONS
-b Suppress all standard error output when creating the certificate. This option is normally only used by the package build.
-e entity-id
Add entity-id (which should be a URI) as an alternative name for the certificate.
-f Remove /etc/shibboleth/sp-cert.pem and /etc/shibboleth/sp-key.pem before generating a new certificate. Without this option, if those
files already exist, shib-keygen prints an error and exits rather than overwriting them.
-g group
After generating the key and certificate, change the group ownership of the key file to this group. By default, the group used is
"_shibd".
-h hostname
Specify the fully-qualified domain name for which to generate a certificate. If this option isn't given, the hostname defaults to the
result of "hostname --fqdn".
-o output-dir
Store sp-cert.pem and sp-key.pem in the directory output-dir rather than the default of /etc/shibboleth.
-u user
After generating the key and certificate, change the ownership of the key file to this user. This is used to allow the key to be read
by a non-root user so that shibd can be run as a non-root user. By default, the key is owned by "_shibd".
-y years
The number of years for which the certificate should be valid. The default expiration time is ten years into the future.
FILES
/etc/shibboleth/sp-cert.cnf
The OpenSSL configuration file used for generating the self-signed certificate. This configuration file is generated when the script
is run and deleted afterwards.
/etc/shibboelth/sp-cert.pem
The default location of the public certificate created by this script.
/etc/shibboleth/sp-key.pem
The default location of the private key for the certificate created by this script.
These three files are stored in the directory given with -o instead, if that option is given.
AUTHOR
This manual page was written by Russ Allbery for Debian GNU/Linux.
COPYRIGHT
Copyright 2008, 2011 Russ Allbery. This manual page is hereby placed into the public domain by its author.
2.4.3 2012-02-16 SHIB-KEYGEN(8)