Configure vsftpd with SSL
.- Check that we have vsftpd compiled with SSL support
# ldd /usr/sbin/vsftpd | grep ssl
libssl.so.5 => /lib/libssl.so.X
.- Create a cert
# openssl req -x509 -nodes -days 730 -newkey rsa:1024 -keyout /etc/ssl/certs/vsftpd.pem -out /etc/ssl/certs/vsftpd.pem
.- Add on vsftpd.conf the following line
[…][…]ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=YESssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NOrsa_cert_file=/etc/ssl/certs/vsftpd.pem
.- Everything done, restart vsftpd (it depends on the distribution).