FileZilla Server3: Implicit SSL part 1

Uniform Server 5-Nano FileZilla FTPd (Server).

Implicit SSL

The previous pages descried how to install the FileZilla server on uniform server. Passwords and data are sent unencrypted over the Internet. Depending on your application and use this is adequate and suitable for most purposes.

FileZila FTPd overs a much more secure alternative using SSL to encrypt both passwords and data. There are a number of steps required in setting up a secure FTP server hence is relatively difficult. I have split this over two pages making it clearer and hopefully easier to understand.

The procedure is incremental first create a server certificate ensure it runs on a local network and finally configure for Internet access.

Top

Server certificate

FileZilla has a built in certificate generator making this process very easy.

Enable SSL support Navigate to folder UniServer Start FileZilla server by double clicking on fz_start.bat Start FileZilla administration interface, double click on fz_admin.bat Select Edit > Settings From the left menu click on SSL/TLS settings - A) Check Enable SSL/TSL support - B) Default Allow explicit SSL/TLS on normal connections - C) Checks Disallow Plain Unencrypted FTP - D) Default Listen for SSL/TLS –only connections on port 990 - E) Click Generate new certificate - F) Note: No need to fill in Private key or Certificate files - Automatically added after next section. No need to fill in Key password box - not required. Top
Fill in certificate details Clicking Generate new certificate opens the certificate form fill in as follows: Seclect Key size 4096bit - G) - may need to reduce this to 1024 Insert 2-Digit country code - H) Fill in some real or dummy information a) to f) Fill in Common name Use localhost or your real domain name - I) Click browse button - J) Navigate to folder C:\UniServer\filezilla_server This is where the certificate will be saved. Note 1: Your virtual drive letter may be different hence use that. Note 2: If you are not using portable mode choose any folder you like. However its a good idea to use folder *\filezilla_server\filezilla_server_portable Click Generate certificate this will take a while. - K) When complete click OK - L) Top
Enable user to use SSL From FileZilla admin select Edit > Users Select page General - left menu Select a user account - M) Check Bypass - N) Check Force SSL for user login - O) Click OK - P) Restart server That completes the FileZille set-up. Note: Although we are using a single user account the above can be applied to other users. You can have a mix of users some using encryption while other do not the choice is yours. Top

Client - FireFTP

FireFox and FireFTP I am assuming your are using FireFox and FireFTP these two are a great combination. You can use your preferred client the set-up will be similar. Check your clients manual for instructions. Start FireFTP: Start FireFTP plugin Tools > FireFTP Main Tab Select Main tab Enter a host either use IP address 127.0.0.1 or host name localhost - R) Enter an Account name Can be anything you like. - Q) Enter login name e.g fred (ftp user name) - S) Enter password for fred fred123 (ftp user account password) - T) Top

Connection Tab Click on Connection tab - U) From the drop down menu select Implicit SSL (Good) - V) Check the port number 990 is set - W) Finally click OK - X) Note: You may need to check the IPv6 box for 4096bi! Local test From FireFTP click the Connect button enter name and password. Your browser will have a whinge, create a certificate exception. FTP folder will display. Local network test On another PC connected to your network repeat the above steps 1-9. Note: At step 1 enter your PC’s IP address. (See Basic Configuration 1 page how to obtain IP address) That confirms you can access the FTP server across your network.

Top

Client - FieZilla

For completeness I have included this section it shows how to install portable FileZilla client and how to use it for testing the above.

Top

Install

1. Create a new folder C:\FileZilla_client (can be any name)
2. Download the latest client FileZillaPortable_3.3.0.1.paf.exe from PortableAppas
3. Save to the above folder
4. Double click on FileZillaPortable_3.3.0.1.paf.exe to extract
5. Select language English click OK
6. Click Next
7. Choose Components defaults are OK click Next
8. Click Browse navigate to folder C:\FileZilla_client
9. Click Install
10. Click Finish

Top

Run Client

1. Navigate to folder C:\FileZilla_client\FileZillaPortable
2. To run double click on file FileZillaPortable.exe

Top

Local test

Using quick connect makes testing extremely easy fill in the top row as follows:

A) Enter Host ftps:/localhost B) Enter Username fred C) Enter Password fred123 D) Enter port 990 F) Click Quickconnect A pop-up is displayed Unknown certificate click OK Creates an exception. You can now view and navigate folders assigned to user fred

Top

Summary

The above provides a secure link to your FTP server. If you are running a wireless network, data can be intercepted by sniffing the radio signals.

Should your basic wireless security be compromised the FTP encryption will provide another hurdle making it more difficult for that data to be accessed.

You do need the above security when FTPing data across the Internet. Before proceeding to the final part make sure you can securely FTP locally.

Top

---