Sponsored Content
Top Forums UNIX for Advanced & Expert Users Does vsftpd support user access with client certificate with priv/pub key + vsftpd certificate? Post 302967284 by gogogo on Monday 22nd of February 2016 07:51:08 AM
Old 02-22-2016
Yes, I do it with certificate of vsftpd.
All is working fine with
Code:
curl -v -3 -l --ftp-ssl "vsftpd_host:port" --cacert "vsftpd_certificate" -u MYUSER:password

I have and want to use another certificate which is from client. I want to use the following connection example:

Code:
curl -v -3 -l --ftp-ssl "vsftpd_host:port" --cacert "vsftpd_certificate" --cert "client_certificate_of_MYUSER" --key "private_key_of_MYUSER" --pass "PASS_CODE_for_private_key_of_MYUSER" -u MYUSER

I want to make sure vsftpd can or can't work with user/client certificate.

Last edited by Don Cragun; 02-22-2016 at 04:48 PM.. Reason: Add CODE and ICODE tags.
 

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

mod_ssl redirect to site if client does not have valid certificate

Hello! I have setup a site to which users authenticate against with openssl certificates. Everything works just fine, be I wish to be able to redirect to a error page with instructions instead of displaying the default error page that firefox displays. How to? I got nothing out of google...... (6 Replies)
Discussion started by: Esaia
6 Replies

2. UNIX for Dummies Questions & Answers

VSFTPD - User or IP based SSL encryption?

Is there a way i can only force SSL encryption if they connect from outside our network OR allow certain IP's to connect without using encryption? (0 Replies)
Discussion started by: mokachoka
0 Replies

3. UNIX for Dummies Questions & Answers

VSFTPD Public Key Help

Hi all Ive setup a VSFTPD server and im forcing SSL encryption. I have made a key and it works perfectly. I have a client who wants to connect but is using software that needs the key to be added before he can connect. Does he need me to send the key i created and that the VSFTPD.conf... (0 Replies)
Discussion started by: mokachoka
0 Replies

4. Red Hat

vsftpd with ssl support on rhel5 64 bit

Hi Friends, I am trying to configure vsftpd server 2.0.5 on rhel5 64 bit installation. I am getting an error when initiating an ssl connection. I am using filezilla 3.0 ftp client. Client is specifically using passive mode connection. I can see the client is able to connect to the server,... (0 Replies)
Discussion started by: arumon
0 Replies

5. UNIX for Dummies Questions & Answers

Calling a webservice and pass a client certificate

Hi, I am trying to call a http soap webservice using curl command , I have tried the below option but I am getting a failure . curl -H "Content-Type: text/xml; charset=utf-8" -H SOAPAction:" -d @Request.xml -X POST... (1 Reply)
Discussion started by: IshuGupta
1 Replies

6. UNIX for Dummies Questions & Answers

Sign Soap Message from client certificate from UNIX

I have to call a webservice , I need to pass the static request from Unix which should have message signing details in the soap header . I am using cURL command for this. I do not have java , I need to do it through Unix only . Below is the kind of Soap envelop I want to wrap around my request .... (0 Replies)
Discussion started by: IshuGupta
0 Replies

7. UNIX for Dummies Questions & Answers

Read Only user in Vsftpd

HI I have set up vsftp on my Red hat server. Chroot has been set up to control access to each user and folder directories. This all works fine. But i have one directory where i want to chroot but ensure that the ftp access is read only. Any help appreciated thanks Treds (1 Reply)
Discussion started by: treds
1 Replies

8. UNIX for Beginners Questions & Answers

How to install new certificate in HPUX client store?

We have a HPUX server that talks to a web service. We recently updated the web service certificate to a new SHA256 cert that has an updated intermediate cert. The HPUX server is now unable to connect because it cannot validate the cert chain due to it not having the new intermediate CA cert. I... (0 Replies)
Discussion started by: techmattr
0 Replies

9. Red Hat

Does vsftpd support user subcommand?

I'm wondering if vsftpd supports user subcommand? I found I can't switch user after ftp login. Maybe someone can give me a certain answer. I always got the message as below, I enabled log_ftp_protocol=YES and checked the vsftpd.log, it didn't help much actually. The log file only... (6 Replies)
Discussion started by: bestard
6 Replies

10. Programming

Python- Client and server certificate validation

Hello Team, I have to verify the Client server certificate validation in HTTPS request(SSL hand shake before the actual HTTPS post request), And tried various ways and failed to verify it successfully. here are the trials and errors, resp = requests.post(url, req, verify=True, timeout=5,... (0 Replies)
Discussion started by: chandana.hs
0 Replies
VSFTPD(8)						    BSD System Manager's Manual 						 VSFTPD(8)

NAME
vsftpd -- Very Secure FTP Daemon SYNOPSIS
vsftpd [configuration file and / or options] DESCRIPTION
vsftpd is the Very Secure File Transfer Protocol Daemon. The server can be launched via a ``super-server'' such as inetd(8) or xinetd(8). Alternatively, vsftpd can be launched in standalone mode, in which case vsftpd itself will listen on the network. This latter mode is easier to use, and recommended. It is activated by setting listen=YES in /etc/vsftpd/vsftpd.conf. Direct execution of the vsftpd binary will then launch the FTP service ready for immediate client connections. Systemd changes the vsftpd daemon start-up. The vsftpd package contains vsftpd-generator script generating symbolic links to /var/run/sys- temd/generator/vsftpd.target.wants directory. The generator is called during e.g. 'systemctl --system daemon-reload'. All these symbolic links link /usr/lib/systemd/system/vsftpd@.service file. The vsftpd daemon(s) is/are controlled by one of following ways: 1. Single daemon using default /etc/vsftpd/vsftpd.conf configuration file # systemctl {start,stop,...} vsftpd[.service] 2. Single daemon using /etc/vsftpd/<conf-name>.conf # systemctl {start,stop,...} vsftpd@<conf-name>[.service] 3. All instances together # systemctl {restart,stop} vsftpd.target See systemd.unit(5), systemd.target(5) for further details. OPTIONS
An optional configuration file or files may be given on the command line. These files must be owned as root if running as root. Any command line option not starting with a "-" character is treated as a config file that will be loaded. Note that config files are loaded in the strict order that they are encountered on the command line. If no config files are specified, the default configuration file of /etc/vsftpd/vsftpd.conf will be loaded, after all other command line options are processed. Supported options are: -v Print the version information and exit, even if other options are encountered. -ooption=value Set a single option, value pair as per the format in the config file. Multiple -o options are supported, and they are applied in strict order relative to their appearance on the command line, including intermingling with loading of config files. EXAMPLES
vsftpd -olisten=NO /etc/vsftpd/vsftpd.conf -oftpd_banner=blah That example overrides vsftpd's built-in default for the "listen" option to be NO, but then loads /etc/vsftpd/vsftpd.conf which may override that setting. Finally, the "ftpd_banner" setting is set to "blah", which overrides any default vsftpd setting and any identical setting that was in the config file. FILES
/etc/vsftpd/vsftpd.conf /usr/lib/systemd/system/vsftpd.service /usr/lib/systemd/system/vsftpd@.service /usr/lib/systemd/system/vsftpd.target SEE ALSO
vsftpd.conf(5) systemd.unit(5) March 8, 2001
All times are GMT -4. The time now is 02:06 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy