Get a Certificate

Question

There's something I don't get.

Do I need a certificate from an authorised organization in order to use edtftpd within my lan?

If so, Could you tell me the steps to get a valid certificate on my machine?

Thank you

m

Answer 1

No, you can generate a key and a certificate yourself using OpenSSL (see here and here for instructions). You can download a Windows version of OpenSSL from here or here.

Make sure you generate a key that DOESN'T require a password since there's no way to enter one in the edtFTPD server.

Once you've generated your key and password replace the ones in the edtFTPD/etc directory (i.e. server.key.pem and server.cert.pem).

Hope that's clear.

- Hans (EDT Support)

Answer 2

Thanks for the answer.

I presume that I have to turn on the tlsrequired and tlsverifyclients parameters and restart the server?

That s what i did but still get this error:
550 SSL/TLS required on the control channel

Any ideas?

m

Answer 3

That can sometimes happen if the client tries to log in before issuing an AUTH command (which switches to TLS mode). If that doesn't help perhaps you can post a snippet of the logs on this forum.

- Hans (EDT Support)