16.04 SERVER USING vsftpd using tls getting ECONNREFUSED
I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a user and they are limited to their directory--singing in from a remote location.
Next, I am attempting to configure TLS to improve security. I follow the instructions and generate the key, then turn on the options in the /etc/vsftpd.conf file (more details below)
I attempt to connect via Filezilla and I get the error
Connection attempt failed with "ECONNREFUSED - Connection refused by server"
I see other similar questions, and I have tried the answers on similar questions with no result.
Following is what I added to the vsftp.conf to enable tls after successfully testing ftp without tls.
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_tlsv2=NO
ssl_tlsv3=NO
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key=/etc/ssl/private/vsftpd.pem
Any ideas?
ftp vsftpd tls
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
|
show 1 more comment
I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a user and they are limited to their directory--singing in from a remote location.
Next, I am attempting to configure TLS to improve security. I follow the instructions and generate the key, then turn on the options in the /etc/vsftpd.conf file (more details below)
I attempt to connect via Filezilla and I get the error
Connection attempt failed with "ECONNREFUSED - Connection refused by server"
I see other similar questions, and I have tried the answers on similar questions with no result.
Following is what I added to the vsftp.conf to enable tls after successfully testing ftp without tls.
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_tlsv2=NO
ssl_tlsv3=NO
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key=/etc/ssl/private/vsftpd.pem
Any ideas?
ftp vsftpd tls
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check withsudo netstat -tulpn | grep vsftpdwhich should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.
– Thomas Ward♦
Jan 19 at 20:50
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try withsudo systemctl -l status vsftpdas well to see if it gives any error messages.
– Thomas Ward♦
Jan 20 at 4:51
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34
|
show 1 more comment
I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a user and they are limited to their directory--singing in from a remote location.
Next, I am attempting to configure TLS to improve security. I follow the instructions and generate the key, then turn on the options in the /etc/vsftpd.conf file (more details below)
I attempt to connect via Filezilla and I get the error
Connection attempt failed with "ECONNREFUSED - Connection refused by server"
I see other similar questions, and I have tried the answers on similar questions with no result.
Following is what I added to the vsftp.conf to enable tls after successfully testing ftp without tls.
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_tlsv2=NO
ssl_tlsv3=NO
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key=/etc/ssl/private/vsftpd.pem
Any ideas?
ftp vsftpd tls
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a user and they are limited to their directory--singing in from a remote location.
Next, I am attempting to configure TLS to improve security. I follow the instructions and generate the key, then turn on the options in the /etc/vsftpd.conf file (more details below)
I attempt to connect via Filezilla and I get the error
Connection attempt failed with "ECONNREFUSED - Connection refused by server"
I see other similar questions, and I have tried the answers on similar questions with no result.
Following is what I added to the vsftp.conf to enable tls after successfully testing ftp without tls.
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_tlsv2=NO
ssl_tlsv3=NO
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key=/etc/ssl/private/vsftpd.pem
Any ideas?
ftp vsftpd tls
ftp vsftpd tls
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
asked Jan 19 at 20:40
jesuiscafejesuiscafe
12
12
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check withsudo netstat -tulpn | grep vsftpdwhich should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.
– Thomas Ward♦
Jan 19 at 20:50
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try withsudo systemctl -l status vsftpdas well to see if it gives any error messages.
– Thomas Ward♦
Jan 20 at 4:51
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34
|
show 1 more comment
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check withsudo netstat -tulpn | grep vsftpdwhich should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.
– Thomas Ward♦
Jan 19 at 20:50
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try withsudo systemctl -l status vsftpdas well to see if it gives any error messages.
– Thomas Ward♦
Jan 20 at 4:51
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check with
sudo netstat -tulpn | grep vsftpd which should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.– Thomas Ward♦
Jan 19 at 20:50
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check with
sudo netstat -tulpn | grep vsftpd which should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.– Thomas Ward♦
Jan 19 at 20:50
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try with
sudo systemctl -l status vsftpd as well to see if it gives any error messages.– Thomas Ward♦
Jan 20 at 4:51
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try with
sudo systemctl -l status vsftpd as well to see if it gives any error messages.– Thomas Ward♦
Jan 20 at 4:51
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34
|
show 1 more comment
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1111209%2f16-04-server-using-vsftpd-using-tls-getting-econnrefused%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1111209%2f16-04-server-using-vsftpd-using-tls-getting-econnrefused%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Did you verify that vSFTPd is actually lisgening on the specificed ports its' on? You can check with
sudo netstat -tulpn | grep vsftpdwhich should tell you if something (vsftpd) is listening on any ports, the "Connection Refused" usually indicates nothing is listening.– Thomas Ward♦
Jan 19 at 20:50
I tried your command, but I don't get a resulting list. Maybe this is the issue, but it was working without the tls, so it must have been listening before? If it is not listening I'm not sure how to resolve this.
– jesuiscafe
Jan 20 at 3:09
Typically, this indicates your config isn't valid, or the service won't start. Check the system logs for vsftpd error events; you can try with
sudo systemctl -l status vsftpdas well to see if it gives any error messages.– Thomas Ward♦
Jan 20 at 4:51
What protocol do you use with FileZilla to connect to the server, i.e. please include the output from FileZilla into your question. My guess is that you are either trying to use SFTP (which is not the same as FTPS) or that you are using implicit FTPS (port 990) instead of explicit FTPS (port 21). See also How To Configure vsftpd to Use SSL/TLS on a CentOS VPS which not only describes the vsftp config but also how to use it with FileZilla in detail.
– Steffen Ullrich
Jan 20 at 6:32
For FileZilla I am using FTP explicit FTP over TLS. I do not have a port selected, so it should detect a port, correct? it is also set to passive. I am using an IP address as opposed to a machine name.
– jesuiscafe
Jan 20 at 14:34