• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

cannot connect to FTP via TLS

AlexeyE

Basic Pleskian
Hello,
I can not connect to the server with using "Require explicit FTP over TLS"
In /etc/proftpd.conf I have added from here http://kb.odin.com/en/2207:
<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/tls.log
TLSProtocol SSLv23

TLSRequired off

TLSRSACertificateFile /usr/local/psa/admin/conf/httpsd.pem
TLSRSACertificateKeyFile /usr/local/psa/admin/conf/httpsd.pem

TLSVerifyClient off

TLSRenegotiate required off
</IfModule>

In FTP-Client (FileZilla), in Settings of Website I checked use Passive mode
FileZilla stops when receiving a directory list (MLSD -Command)

In iptables I have:
# Allow Passive FTP Connections
-A INPUT -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT
-A OUTPUT -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT


Plesk Firewall extension isnt installed
Ver.of Plesk: 12.0.18

PS: in Tools & Settings ->SSL Certificates ->I created a new self-signed certificate, set as default.
In Tools & Settings ->IP Adress bind new certificate to IP

For each domain is created own certificate, but when try to connect, will be ascked to confirm a default certificate from Plesk
I have create a new certificate (using SSH)

Service restarted too with: service sw-cp-server restart


What is wrong here?
Thanks a lot
 
Last edited:
Back
Top