I encourage to introduce at least "CertFile" because the related "-2" is well documented:
> '-2 <file>': when using TLS, set the path to the certificate file. > https://github.com/jedisct1/pure-ftpd/ Instead, the "CertFileAndKey" activates something undocumented. Why more than 1 file separated by comma? What do you expect and does it really work? I believe it just does not work. CURRENT WORKAROUND: Note for myself that the default cert seems saved here: /etc/ssl/private/pure-ftpd.pem So, if somebody like me needs to set a specific certificate, I assume I can just create that file, without specifying any new configuration and without improving the wrapper script. TL;DR I recommend to introduce "CertFile", and maybe just that.

