标签：
# # Proftpd sample configuration for FTPS connections. # # Note that FTPS impose some limitations in NAT traversing. # See http://www.castaglia.org/proftpd/doc/contrib/ProFTPD-mini-HOWTO-TLS.html # for more information. # <IfModule mod_tls.c> TLSEngine on TLSLog /var/log/proftpd/tls.log TLSProtocol SSLv23 # # Server SSL certificate. You can generate a self-signed certificate using # a command like: # # openssl req -x509 -newkey rsa:1024 # -keyout /etc/ssl/private/proftpd.key -out /etc/ssl/certs/proftpd.crt # -nodes -days 365 # # The proftpd.key file must be readable by root only. The other file can be # readable by anyone. # # chmod 0600 /etc/ssl/private/proftpd.key # chmod 0640 /etc/ssl/private/proftpd.key # TLSRSACertificateFile /etc/ssl/certs/proftpd.crt TLSRSACertificateKeyFile /etc/ssl/private/proftpd.key # # CA the server trusts... #TLSCACertificateFile /etc/ssl/certs/CA.pem # ...or avoid CA cert and be verbose #TLSOptions NoCertRequest EnableDiags # ... or the same with relaxed session use for some clients (e.g. FireFtp) TLSOptions NoCertRequest EnableDiags NoSessionReuseRequired # # # Per default drop connection if client tries to start a renegotiate # This is a fix for CVE-2009-3555 but could break some clients. # #TLSOptions AllowClientRenegotiations # # Authenticate clients that want to use FTP over TLS? # TLSVerifyClient off # # Are clients required to use FTP over TLS when talking to this server? # TLSRequired on # # Allow SSL/TLS renegotiations when the client requests them, but # do not force the renegotations. Some clients do not support # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these # clients will close the data connection, or there will be a timeout # on an idle data connection. # TLSRenegotiate required off </IfModule>
这样的配置我们就可以使用python的ftplib模块进行操作了
In [1]: from ftplib import FTP_TLS In [2]: ftps=FTP_TLS(‘127.0.0.1‘) In [3]: ftps.login(‘jastme‘,‘jastme‘) Out[3]: ‘230 User jastme logged in‘ In [4]: ftps.prot_p() Out[4]: ‘200 Protection set to Private‘ In [5]: ftps.retrlines(‘LIST‘) -rw-r--r-- 1 jastme ftpgroup 1724 Mar 11 02:46 updatewebserver-gevent.py Out[5]: ‘226 Transfer complete‘ In [7]:
proftp 配置tls,连接需要SSL加密，数据传输可要可不要
标签：
原文地址：http://my.oschina.net/jastme/blog/385425
