Enable SSL/TLS for proFTPd in Plesk

This article will go over enabling TLS/SSL support for FTP on Linux Plesk servers.

  1. SSH into the server. If you are unfamiliar with SSH, please see How do I establish an SSH connection to my server?
  2. Edit /etc/proftpd.conf in your favorite text editor and add the following lines to the configuration file:
  3. <IfModule mod_tls.c>

    TLSEngine on

    TLSLog /var/log/tls.log

    TLSProtocol SSLv23

    # Are clients required to use FTP over TLS?

    TLSRequired off

    # Server's certificate

    TLSRSACertificateFile /usr/local/psa/admin/conf/httpsd.pem

    TLSRSACertificateKeyFile /usr/local/psa/admin/conf/httpsd.pem

    # Authenticate clients that want to use FTP over TLS?

    TLSVerifyClient off

    # Allow SSL/TLS renegotiations when the client requests them, but

    # do not force the renegotations. Some clients do not support

    # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these

    # clients will close the data connection, or there will be a timeout

    # on an idle data connection.

    TLSRenegotiate required off

    </IfModule>

  4. Save the file and restart the service xinetd for the changes to take place.