FTP and TSL

[Sébastien Barthélemy]

Le mercredi 25 octobre 2006 à 11:22 +0200, Emil Edeholt a écrit :
> Hi!
> 
> I would like to get FTP with encryption running on my ubuntu server (I 
> don't need a paid cert). Is this complicated? I can't seem to find any 
> info on this in the wiki.

You have to distinguish SFTP and FTPS

SFTP is FTP inside SSH, it works on the port 22 and you have to install
openssh-server and _not_ and FTP server. It is easy to set up and use.

FTPS is like HTTPS, and it is complicated because:
 * it is not standard (it was only a draft, when I had a look)
 * FTP uses several ports, which are chosen during the connexion. Your
firewall spies the connexion to open only the good ports (the chosen
ones). If you encrypt this (with TLS), your firewall cannot spy anymore,
and the only way is to open everything...

Therefore, it is far more simple to use sftp. You can make it safer with
rssh.

hope it helps

-- 
SB