FileZilla Server3: Implicit SSL part 1: Difference between revisions

From The Uniform Server Wiki
Jump to navigation Jump to search
No edit summary
m (Reverted edits by Upazixorys (Talk); changed back to last version by Ric)
 
Line 1: Line 1:
=[http://yzobiwysac.co.cc Page Is Unavailable Due To Site Maintenance, Please Visit Reserve Copy Page]=
{{Uc nav FileZilla Server3}}
{{Uc nav FileZilla Server3}}
'''Implicit SSL'''
'''Implicit SSL'''
Line 15: Line 14:
{|
{|
|-
|-
|valign="top" width="100%"|
|valign="top" width="100%"|
==== Enable SSL support ====
==== Enable SSL support ====
* Navigate to folder '''UniServer'''
* Navigate to folder '''UniServer'''
# Start FileZilla server by double clicking on '''fz_start.bat'''
# Start FileZilla server by double clicking on '''fz_start.bat'''
# Start FileZilla administration interface, double click on '''fz_admin.bat'''
# Start FileZilla administration interface, double click on '''fz_admin.bat'''
# Select '''Edit > Settings'''  
# Select '''Edit > Settings'''  
# From the left menu '''click''' on '''SSL/TLS settings''' - A)
# From the left menu '''click''' on '''SSL/TLS settings''' - A)
# Check '''Enable SSL/TSL support''' - B)
# Check '''Enable SSL/TSL support''' - B)
Line 35: Line 34:
[[Image:Uc5_filezilla_4.gif]]
[[Image:Uc5_filezilla_4.gif]]
|-
|-
|valign="top"|
|valign="top"|


==== Fill in certificate details ====
==== Fill in certificate details ====
Clicking Generate new certificate opens the certificate form fill in as follows:  
Clicking Generate new certificate opens the certificate form fill in as follows:  
<ol start="10">
<ol start="10">
&lt;li&gt; '''Seclect Key size''' 4096bit - G) - may need to reduce this to 1024&lt;/li&gt;
<li> '''Seclect Key size''' 4096bit - G) - may need to reduce this to 1024</li>
&lt;li&gt; Insert 2-Digit '''country code''' - H)&lt;/li&gt;
<li> Insert 2-Digit '''country code''' - H)</li>
&lt;li&gt; Fill in some '''real or dummy information''' a) to f)&lt;/li&gt;
<li> Fill in some '''real or dummy information''' a) to f)</li>
&lt;li&gt; '''Fill in Common name''' Use '''localhost''' or your real domain name - I)&lt;/li&gt;
<li> '''Fill in Common name''' Use '''localhost''' or your real domain name - I)</li>
&lt;li&gt; Click browse button - J)&lt;br&gt;
<li> Click browse button - J)<br>
Navigate to folder '''C:\UniServer\filezilla_server'''&lt;br&gt;This is where the certificate will be saved.&lt;br&gt;&lt;br&gt;
Navigate to folder '''C:\UniServer\filezilla_server'''<br>This is where the certificate will be saved.<br><br>
'''''Note 1'':''' Your virtual drive letter may be different hence use that.&lt;br&gt;'''''Note 2'':''' If you are not using portable mode choose any folder you like.&lt;br&gt;However its a good idea to use folder&lt;br&gt;*\filezilla_server\filezilla_server_portable&lt;br&gt;&lt;br&gt;
'''''Note 1'':''' Your virtual drive letter may be different hence use that.<br>'''''Note 2'':''' If you are not using portable mode choose any folder you like.<br>However its a good idea to use folder<br>*\filezilla_server\filezilla_server_portable<br><br>
&lt;/li&gt;
</li>
&lt;li&gt; Click '''Generate certificate''' this will take a while. - K) &lt;/li&gt;
<li> Click '''Generate certificate''' this will take a while. - K) </li>
&lt;li&gt; When complete click '''OK''' - L)
<li> When complete click '''OK''' - L)
&lt;/ol&gt;
</ol>


'''''[[#top | Top]]'''''
'''''[[#top | Top]]'''''
Line 56: Line 55:
[[Image:Uc5_filezilla_5.gif]]
[[Image:Uc5_filezilla_5.gif]]
|-
|-
|valign=&quot;top&quot;|
|valign="top"|


==== Enable user to use SSL ====
==== Enable user to use SSL ====
&lt;ol start=&quot;17&quot;&gt;
<ol start="17">
&lt;li&gt; From FileZilla admin select '''Edit &gt; Users'''&lt;/li&gt;
<li> From FileZilla admin select '''Edit > Users'''</li>
&lt;li&gt; Select page '''General''' - left menu&lt;/li&gt;
<li> Select page '''General''' - left menu</li>
&lt;li&gt; '''Select a user account'''  - M)&lt;/li&gt;
<li> '''Select a user account'''  - M)</li>
&lt;li&gt; '''Check Bypass''' - N)&lt;/li&gt;
<li> '''Check Bypass''' - N)</li>
&lt;li&gt; '''Check Force SSL''' for user login - O)&lt;/li&gt;
<li> '''Check Force SSL''' for user login - O)</li>
&lt;li&gt; Click '''OK''' - P)&lt;/li&gt;
<li> Click '''OK''' - P)</li>
&lt;li&gt; '''Restart server'''&lt;/li&gt;
<li> '''Restart server'''</li>
&lt;/ol&gt;
</ol>


That completes the FileZille set-up.
That completes the FileZille set-up.
Line 85: Line 84:
{|
{|
|-
|-
|valign=&quot;top&quot; width=&quot;100%&quot;|
|valign="top" width="100%"|
==== FireFox and FireFTP ====
==== FireFox and FireFTP ====
I am assuming your are using FireFox and FireFTP these two are a great combination.
I am assuming your are using FireFox and FireFTP these two are a great combination.
Line 93: Line 92:


'''''Start FireFTP'':'''
'''''Start FireFTP'':'''
* Start FireFTP  plugin '''Tools &gt; FireFTP'''
* Start FireFTP  plugin '''Tools > FireFTP'''


===== Main Tab =====
===== Main Tab =====
Line 106: Line 105:
[[Image:Uc_filezilla_7.gif]]
[[Image:Uc_filezilla_7.gif]]
|-
|-
|valign=&quot;top&quot; width=&quot;100%&quot;|
|valign="top" width="100%"|
===== Connection Tab =====
===== Connection Tab =====
&lt;ol start=&quot;6&quot;&gt;
<ol start="6">
&lt;li&gt; '''Click on Connection''' tab  - U)&lt;/li&gt;
<li> '''Click on Connection''' tab  - U)</li>
&lt;li&gt; From the drop down menu '''select Implicit SSL''' (Good) - V)&lt;/li&gt;
<li> From the drop down menu '''select Implicit SSL''' (Good) - V)</li>
&lt;li&gt; Check the port number '''990''' is set  - W)&lt;/li&gt;
<li> Check the port number '''990''' is set  - W)</li>
&lt;li&gt; Finally click '''OK''' - X)&lt;/li&gt;
<li> Finally click '''OK''' - X)</li>
&lt;/ol&gt;
</ol>
'''''Note'':''' You may need to check the IPv6 box for 4096bi!
'''''Note'':''' You may need to check the IPv6 box for 4096bi!


Line 160: Line 159:
Using quick connect makes testing extremely easy fill in the top row as follows:
Using quick connect makes testing extremely easy fill in the top row as follows:


{|cellspacing=&quot;10&quot;
{|cellspacing="10"
|-valign=&quot;top&quot;
|-valign="top"
|
|
* A) Enter Host '''ftps:/localhost'''
* A) Enter Host '''ftps:/localhost'''
Line 168: Line 167:
* D) Enter port '''990'''
* D) Enter port '''990'''
* F) Click Quickconnect
* F) Click Quickconnect
* A pop-up is displayed '''Unknown certificate''' click OK&lt;br /&gt; Creates an exception.
* A pop-up is displayed '''Unknown certificate''' click OK<br /> Creates an exception.


You can now view and navigate folders assigned to user '''fred'''  
You can now view and navigate folders assigned to user '''fred'''  

Latest revision as of 07:53, 24 November 2010

Uniform Server 5-Nano
FileZilla FTPd (Server).

Implicit SSL

The previous pages descried how to install the FileZilla server on uniform server. Passwords and data are sent unencrypted over the Internet. Depending on your application and use this is adequate and suitable for most purposes.

FileZila FTPd overs a much more secure alternative using SSL to encrypt both passwords and data. There are a number of steps required in setting up a secure FTP server hence is relatively difficult. I have split this over two pages making it clearer and hopefully easier to understand.

The procedure is incremental first create a server certificate ensure it runs on a local network and finally configure for Internet access.

Top

Server certificate

FileZilla has a built in certificate generator making this process very easy.

Enable SSL support

  • Navigate to folder UniServer
  1. Start FileZilla server by double clicking on fz_start.bat
  2. Start FileZilla administration interface, double click on fz_admin.bat
  3. Select Edit > Settings
  4. From the left menu click on SSL/TLS settings - A)
  5. Check Enable SSL/TSL support - B)
  6. Default Allow explicit SSL/TLS on normal connections - C)
  7. Checks Disallow Plain Unencrypted FTP - D)
  8. Default Listen for SSL/TLS –only connections on port 990 - E)
  9. Click Generate new certificate - F)

Note:

  • No need to fill in Private key or Certificate files - Automatically added after next section.
  • No need to fill in Key password box - not required.

Top

Fill in certificate details

Clicking Generate new certificate opens the certificate form fill in as follows:

  1. Seclect Key size 4096bit - G) - may need to reduce this to 1024
  2. Insert 2-Digit country code - H)
  3. Fill in some real or dummy information a) to f)
  4. Fill in Common name Use localhost or your real domain name - I)
  5. Click browse button - J)
    Navigate to folder C:\UniServer\filezilla_server
    This is where the certificate will be saved.

    Note 1: Your virtual drive letter may be different hence use that.
    Note 2: If you are not using portable mode choose any folder you like.
    However its a good idea to use folder
    *\filezilla_server\filezilla_server_portable

  6. Click Generate certificate this will take a while. - K)
  7. When complete click OK - L)

Top

Enable user to use SSL

  1. From FileZilla admin select Edit > Users
  2. Select page General - left menu
  3. Select a user account - M)
  4. Check Bypass - N)
  5. Check Force SSL for user login - O)
  6. Click OK - P)
  7. Restart server

That completes the FileZille set-up.

Note:

Although we are using a single user account the above can be applied to other users.

You can have a mix of users some using encryption while other do not the choice is yours.

Top

Client - FireFTP

FireFox and FireFTP

I am assuming your are using FireFox and FireFTP these two are a great combination.

You can use your preferred client the set-up will be similar. Check your clients manual for instructions.


Start FireFTP:

  • Start FireFTP plugin Tools > FireFTP
Main Tab
  1. Select Main tab
  2. Enter a host either use IP address 127.0.0.1 or host name localhost - R)
  3. Enter an Account name Can be anything you like. - Q)
  4. Enter login name e.g fred (ftp user name) - S)
  5. Enter password for fred fred123 (ftp user account password) - T)

Top

Connection Tab
  1. Click on Connection tab - U)
  2. From the drop down menu select Implicit SSL (Good) - V)
  3. Check the port number 990 is set - W)
  4. Finally click OK - X)

Note: You may need to check the IPv6 box for 4096bi!

Local test

From FireFTP click the Connect button enter name and password.

Your browser will have a whinge, create a certificate exception.

FTP folder will display.

Local network test

On another PC connected to your network repeat the above steps 1-9.

Note: At step 1 enter your PC’s IP address. (See Basic Configuration 1 page how to obtain IP address)

That confirms you can access the FTP server across your network.

Top

Client - FieZilla

For completeness I have included this section it shows how to install portable FileZilla client and how to use it for testing the above.

Top

Install

  1. Create a new folder C:\FileZilla_client (can be any name)
  2. Download the latest client FileZillaPortable_3.3.0.1.paf.exe from PortableAppas
  3. Save to the above folder
  4. Double click on FileZillaPortable_3.3.0.1.paf.exe to extract
  5. Select language English click OK
  6. Click Next
  7. Choose Components defaults are OK click Next
  8. Click Browse navigate to folder C:\FileZilla_client
  9. Click Install
  10. Click Finish

Top

Run Client

  1. Navigate to folder C:\FileZilla_client\FileZillaPortable
  2. To run double click on file FileZillaPortable.exe

Top

Local test

Using quick connect makes testing extremely easy fill in the top row as follows:

  • A) Enter Host ftps:/localhost
  • B) Enter Username fred
  • C) Enter Password fred123
  • D) Enter port 990
  • F) Click Quickconnect
  • A pop-up is displayed Unknown certificate click OK
    Creates an exception.

You can now view and navigate folders assigned to user fred

Top

Summary

The above provides a secure link to your FTP server. If you are running a wireless network, data can be intercepted by sniffing the radio signals.

Should your basic wireless security be compromised the FTP encryption will provide another hurdle making it more difficult for that data to be accessed.

You do need the above security when FTPing data across the Internet. Before proceeding to the final part make sure you can securely FTP locally.

Top