{"id":2979,"date":"2022-06-08T07:22:25","date_gmt":"2024-06-29T23:50:53","guid":{"rendered":""},"modified":"2025-02-02T00:46:19","modified_gmt":"2025-02-01T23:46:19","slug":"how-to-setup-ftp-server-with-vsftpd-and-tls-on-ubuntu-22-04","status":"publish","type":"post","link":"https:\/\/netcloud24.com\/knowledgebase\/how-to-setup-ftp-server-with-vsftpd-and-tls-on-ubuntu-22-04\/","title":{"rendered":"How to Setup FTP Server with vSFTPd and TLS on Ubuntu 22.04"},"content":{"rendered":"

\u00a0<\/p>\n<\/p>\n

\n

\u00a0<\/h1>\n<\/header>\n
\n

FTP (File Transfer Protocol) is a standard protocol for transferring files between a client and a server. For secure file transfer, you can configure FTP to work with TLS (Transport Layer Security) using the vSFTPd server. In this guide, we will walk you through setting up an FTP server with vSFTPd and enabling TLS on Ubuntu 22.04. Whether you\u2019re setting up a server locally or using a , this guide will help you securely transfer files.<\/p>\n

\n

Step 1: Update Your System<\/h2>\n

Before starting, ensure that your Ubuntu system is up to date. Run the following commands to update the package lists and install any available upgrades:<\/p>\n

sudo apt update && sudo apt upgrade -y<\/code><\/pre>\n
Keeping your system updated ensures that you have the latest security patches, which is crucial when managing an FTP server, especially when using platforms like VPS Windows VPS Servers<\/a>.<\/p>\n<\/section>\n
\n
Step 2: Install vSFTPd<\/h2>\n
The vSFTPd (Very Secure FTP Daemon) is a fast and secure FTP server for Unix-based systems. Install it using the following command:<\/p>\n
sudo apt install vsftpd -y<\/code><\/pre>\n
After installation, start and enable the vSFTPd service:<\/p>\n
sudo systemctl start vsftpd\r\nsudo systemctl enable vsftpd<\/code><\/pre>\n<\/section>\n
\n
Step 3: Configure vSFTPd<\/h2>\n
Now, let’s configure vSFTPd for secure connections. Open the vSFTPd configuration file:<\/p>\n
sudo nano \/etc\/vsftpd.conf<\/code><\/pre>\n
Add or modify the following lines to configure the FTP server:<\/p>\n
# Enable write permissions for users\r\nwrite_enable=YES\r\n\r\n# Restrict users to their home directory\r\nchroot_local_user=YES\r\n\r\n# Enable passive mode\r\npasv_enable=YES\r\npasv_min_port=10000\r\npasv_max_port=10100\r\n\r\n# Disable anonymous login\r\nanonymous_enable=NO\r\n\r\n# Allow local users to login\r\nlocal_enable=YES\r\n\r\n# Enable TLS\r\nssl_enable=YES\r\nallow_anon_ssl=NO\r\nforce_local_data_ssl=YES\r\nforce_local_logins_ssl=YES\r\nssl_tlsv1=YES\r\nssl_sslv2=NO\r\nssl_sslv3=NO\r\nrsa_cert_file=\/etc\/ssl\/certs\/vsftpd.pem<\/code><\/pre>\n
Save and close the file.<\/p>\n<\/section>\n
\n
Step 4: Create SSL\/TLS Certificates<\/h2>\n
To secure FTP connections with TLS, you need to create an SSL certificate. You can create a self-signed certificate using OpenSSL:<\/p>\n
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/vsftpd.pem -out \/etc\/ssl\/certs\/vsftpd.pem<\/code><\/pre>\n
Follow the prompts to provide certificate details. Once the certificate is created, make sure the permissions are set correctly:<\/p>\n
sudo chmod 600 \/etc\/ssl\/private\/vsftpd.pem \/etc\/ssl\/certs\/vsftpd.pem<\/code><\/pre>\n<\/section>\n
\n
Step 5: Configure the Firewall<\/h2>\n
If you have a firewall enabled on your Ubuntu server, you need to allow FTP and the passive port range through the firewall. Use the following commands to allow the necessary ports:<\/p>\n
sudo ufw allow 20\/tcp\r\nsudo ufw allow 21\/tcp\r\nsudo ufw allow 10000:10100\/tcp<\/code><\/pre>\n
Reload the firewall to apply the changes:<\/p>\n
sudo ufw reload<\/code><\/pre>\n<\/section>\n
\n
Step 6: Restart vSFTPd<\/h2>\n
After configuring vSFTPd and creating the SSL certificate, restart the vSFTPd service to apply the changes:<\/p>\n
sudo systemctl restart vsftpd<\/code><\/pre>\n<\/section>\n
\n
Step 7: Test FTP Server<\/h2>\n
You can now test your FTP server using an FTP client like FileZilla. Ensure that you connect using FTP over TLS. Use your server’s IP address, FTP username, and password to connect securely. If you are hosting the server on a UK Windows VPS<\/a>, make sure to use the correct external IP address provided by your VPS provider.<\/p>\n<\/section>\n