一个很急的关于ftp的问题

yanu

刚试了下, 贴配置文件给你吧

vsftpd.conf

1. 
   
2. # grep -v ^# /etc/vsftpd/vsftpd.conf
   
3. anonymous_enable=YES
   
4. local_enable=NO
   
5. dirmessage_enable=YES
   
6. xferlog_enable=YES
   
7. connect_from_port_20=YES
   
8. listen=YES
   
9. allow_anon_ssl=yes
   
10. guest_enable=yes
    
11. guest_username=ftp
    
12. no_anon_password=yes
    
13. debug_ssl=yes
    
14. force_anon_logins_ssl=yes
    
15. force_local_logins_ssl=yes
    
16. require_cert=yes
    
17. ssl_enable=yes
    
18. ssl_request_cert=yes
    
19. ca_certs_file=/u01/progs/CA/rhythm/cacert.pem
    
20. rsa_cert_file=/u01/progs/CA/apache/server/www.crt
    
21. rsa_private_key_file=/u01/progs/CA/apache/server/server.key
    
22. 
    

复制代码

偷懒了,复用我apache的ssl证书...


用lftp测试简单测了下. lftp 的设置:

1. 
   
2. # cat ~/.lftp/rc
   
3. 
   
4. set  ssl:ca-file "/u01/progs/CA/rhythm/cacert.pem"
   
5. set  ssl:cert-file "/u01/progs/CA/apache/client/xindy/xindy.crt"
   
6. set  ssl:key-file "/u01/progs/CA/apache/client/xindy/xindy.key"
   
7. set   ftp:ssl-force true
   
8. 
   
9. 
   
10. # lftp  www.rhythm.so
    
11. lftp www.rhythm.so:~> ls                          
    
12. ls: Login failed: 530 Anonymous sessions must use encryption.
    
13. lftp www.rhythm.so:~> user ftp
    
14. Password:
    
15. lftp ftp@www.rhythm.so:~> ls
    
16. -rw-r--r--    1 0        0               0 Jul 27 14:40 successful
    
17. lftp ftp@www.rhythm.so:/>
    
18. 
    

复制代码

yanu

- -   这不是用ssh私钥登录,  没听说过有用ssh私钥登录的FTP