• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

cannot connect to FTP via TLS

AlexeyE

Basic Pleskian
Hello,
I can not connect to the server with using "Require explicit FTP over TLS"
In /etc/proftpd.conf I have added from here http://kb.odin.com/en/2207:
<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/tls.log
TLSProtocol SSLv23

TLSRequired off

TLSRSACertificateFile /usr/local/psa/admin/conf/httpsd.pem
TLSRSACertificateKeyFile /usr/local/psa/admin/conf/httpsd.pem

TLSVerifyClient off

TLSRenegotiate required off
</IfModule>

In FTP-Client (FileZilla), in Settings of Website I checked use Passive mode
FileZilla stops when receiving a directory list (MLSD -Command)

In iptables I have:
# Allow Passive FTP Connections
-A INPUT -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT
-A OUTPUT -p tcp --sport 1024: --dport 1024: -m state --state ESTABLISHED,RELATED -j ACCEPT


Plesk Firewall extension isnt installed
Ver.of Plesk: 12.0.18

PS: in Tools & Settings ->SSL Certificates ->I created a new self-signed certificate, set as default.
In Tools & Settings ->IP Adress bind new certificate to IP

For each domain is created own certificate, but when try to connect, will be ascked to confirm a default certificate from Plesk
I have create a new certificate (using SSH)

Service restarted too with: service sw-cp-server restart


What is wrong here?
Thanks a lot
 
Last edited:
Back
Top