Vsftpd and TLS (was: What is the most secure FTP server?)

[Camaleón <noelamac@gmail.com>]

On Thu, 10 Mar 2011 22:50:16 -0500, Robert Blair Mason Jr. wrote:

> Quick question for those of us running anonymous ftp: Is it possible to
> configure vsftpd to allow unencrypted anonymous sessions, but require
> encryption for all user sessions?  I've looked at the configuration but
> all of the encryption settings seem to be global (no configuration on a
> per-user/group basis).

I've not tested, but the involved variables should be:

# to globally enable SSL (if client request it)
ssl_enable=YES

# this is the default value if not set
force_local_data_ssl=YES

# this is the deafult value if not set
force_local_logins_ssl=YES

# this is the default value if not set
allow_anon_ssl=NO

Greetings,

-- 
Camaleón