Public bug reported:

The default configuration file for vsftpd (/etc/vsftpd.conf) in natty
contains the following line:

rsa_cert_file=/etc/ssl/private/vsftpd.pem

However, this file does not exist, so any attempt to enable SSL
(ssl_enable=YES) will cause the following error to be logged in
/var/log/syslog

[ multiple respawning lines ]
Aug 23 11:41:02 peladon init: vsftpd main process ended, respawning
Aug 23 11:41:02 peladon init: vsftpd main process (8733) terminated with status 
1
Aug 23 11:41:02 peladon init: vsftpd respawning too fast, stopped

This could be fixed in one of two ways:

1. Comment out the rsa_cert_file (it is uncommented by default) and add
a comment above it telling the user that they must supply the correct
filename before uncommenting.

2. Replace the rsa_cert_file line with the following two lines:
rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

These point to the default snakeoil certificate and private keys, which
are sufficient to get vsftpd up and running with SSL enabled.

lsb_release -rd
Description:    Ubuntu 11.04
Release:        11.04

apt-cache policy vsftpd
vsftpd:
  Installed: 2.3.2-3ubuntu4
  Candidate: 2.3.2-3ubuntu4
  Version table:
 *** 2.3.2-3ubuntu4 0
        500 http://gb.archive.ubuntu.com/ubuntu/ natty/main amd64 Packages
        100 /var/lib/dpkg/status

** Affects: vsftpd (Ubuntu)
     Importance: Undecided
         Status: New

** Summary changed:

- Default configuration file refers to non-existant certificate
+ Default configuration file refers to nonexistent certificate

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/831907

Title:
  Default configuration file refers to nonexistent certificate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/831907/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to