Discover Centmin Mod today
Register Now

Beta Branch Centmin Mod .08 beta + pure-ftpd virtual FTP user support

Discussion in 'Beta release code' started by eva2000, Jan 19, 2015.

  1. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    Starting a dedicated thread for this update as it's a big change for pure-ftpd virtual FTP user support with isolated FTP users to Nginx vhost directory in Centmin Mod .08 betas.

    Pure-ftpd Virtual FTP users



    Made an update to Centmin Mod .08 which easily added FTP virtual user/pass support to Nginx vhost creation routine on centmin.sh menu option 2 ! This should lock the virtual FTP user into their Nginx vhost directory :D

    Note:
    1. This is not the full jailed/chrooted user preview setup I outlined but a much more basic workaround for now. So still not suited to full own shared hosting as it isn't fully isolated between virtual ftp user accounts. Still the purpose is for access by yourself or trusted folks. I wouldn't offer shared hosting to unknown users using this!
    2. If using Wordpress see note about Direct FS Method setting in wp-config.php
    Commit: add support for pure-ftpd virtual FTP users & TLS FTP (explicit SSL) onl... · d0f5c8e · centminmod/centminmod · GitHub

    It was @Mask question at LEB and StartledPhoenix user's answer which gets all the credit for pointing me onto using pure-ftpd YUM package and virtual user support. Honestly, never looked at pure-ftpd as an option !

    Enabled TLS/SSL
    • I went one step further beyond just adding pure-ftpd virtual user support, I also enabled and forced TLS SSL only mode by creating a self-signed SSL certificate for pure-ftpd. So there's enforced encryption for more secure FTP connection.
    • As such you need to set your FTP client to use FTP explicit SSL mode and enable and check Passive connections (PASV) and connect via your server's ip address for hostname and use FTP port 21 (not actually used in PASV mode with FTP TLS/SSL). Filezilla users have a guide and info for FTP Explicit SSL/TLS mode. Centmin Mod updated code already creates the self signed certificate, so only thing in Filezilla to do is set In the SSL/TLS settings menu check "allow Explicit SSL/TLS on normal connections" and check "Disallow plain unencrypted FTP" and "Force PROT P to encrypt file transfers in SSL/TLS mode"
    • You also have to disable in your FTP client SSL validation as a self-signed certificate was used.
    • Note passive ports if needed to be set in FTP client are in range between 3000 to 3050 i.e. for Filezilla.
    Sample centmin.sh menu option 2 add Nginx vhost output from Centmin Mod .08 beta below

    Code:
    --------------------------------------------------------
    Centmin Mod 1.2.3-eva2000.08 - http://centminmod.com
    --------------------------------------------------------
                       Centmin Mod Menu
    --------------------------------------------------------
    1).  Centmin Install
    2).  Add Nginx vhost domain
    3).  NSD setup domain name DNS
    4).  Nginx Upgrade / Downgrade
    5).  PHP Upgrade / Downgrade
    6).  XCache Re-install
    7).  APC Cache Re-install
    8).  XCache Install
    9).  APC Cache Install
    10). Memcached Server Re-install
    11). MariaDB 5.2, 5.5, 10 Upgrade Sub-Menu
    12). Zend OpCache Install/Re-install
    13). Install ioping.sh vbtechsupport.com/1239/
    14). SELinux disable
    15). Install/Re-install ImageMagick PHP Extension
    16). Change SSHD Port Number
    17). Multi-thread compression: pigz,pbzip2,lbzip2,p7zip etc
    18). Suhosin PHP Extension install
    19). Install FFMPEG and FFMPEG PHP Extension
    20). NSD Re-install
    21). Update - Nginx + PHP-FPM + Siege
    22). Exit
    --------------------------------------------------------
    Enter option [ 1 - 22 ] 2
    --------------------------------------------------------
    
    Code:
    ---------------------------------------------
    Enter vhost domain name you want to add (without www. prefix): domain1.com
    Create FTP username for vhost domain (enter username): ftpuser4
    Create FTP password for ftpuser4 (enter password): pass
    
    FTP username you entered: ftpuser4
    FTP password you entered: pass
    
    Password:
    Enter it again:
    
    ---------------------------------------------
    service nginx reload
    nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
    nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
    Reloading nginx:                                           [  OK  ]
    service pure-ftpd restart
    Stopping pure-ftpd:                                        [  OK  ]
    Starting pure-ftpd:                                        [  OK  ]
    
    ---------------------------------------------
    FTP hostname : ipaddress
    FTP port : 21
    FTP mode : FTP (explicit SSL)
    FTP Passive (PASV) : ensure is checked/enabled
    FTP username created for domain1.com : ftpuser4
    FTP password created for domain1.com : pass
    ---------------------------------------------
    vhost for domain1.com created successfully
    vhost conf file for domain1.com created: /usr/local/nginx/conf/conf.d/domain1.com.conf
    upload files to /home/nginx/domains/domain1.com/public
    vhost log files directory is /home/nginx/domains/domain1.com/log
    
    Current vhost listing at: /usr/local/nginx/conf/conf.d/
    
    Jan 1   00:37   798    ssl.conf
    Jan 1   00:37   1.1K   demodomain.com.conf
    Jan 1   00:37   1.4K   virtual.conf
    Jan 17  21:53   1.3K   domain1.com.conf
    ---------------------------------------------
    My SecureFX SFTP/FTP client settings example with FTP/SSL (explicit). Some FTP clients call it FTP over TLS or SSL

    securefx_ftp_explicit_ssl_00.png
    securefx_ftp_explicit_ssl_01.png

    Disable certificate validation due to using self-signed SSL certificate

    securefx_ftp_explicit_ssl_02.png

    TLS secure connection details connected via TLS1.2

    securefx_ftp_explicit_ssl_03.png

    Using Filezilla FTP Client with FTP Explicit TLS/SSL

    filezilla_pureftpd_ftp_explicit_tls_ssl_00.png

    Transfer mode = Passive

    filezilla_pureftpd_ftp_explicit_tls_ssl_01.png

    Self-signed certificate as expected is unknown to Filezilla so needs to manually allowed. Will need to work on setting SHA2 for signature algorithm etc

    filezilla_pureftpd_ftp_explicit_tls_ssl_02.png

    This is a quick implementation in Centmin Mod with only a few hours of testing. So test it out on test VPS servers first and provide feedback and suggestions for improvements here ;) :)

    To be able to use this code, ensure you're using latest updated Centmin Mod .08 beta code. If you have an existing .08 install, see how to update the instance in 1st post of this thread. Or try out the Git command line method outlined here.

    pure-pw commands



    pure-pw command useradd was to add a virtual user. However, there's more commands to delete a user or change passwords etc.

    pure-pw manual is here and http://download.pureftpd.org/pub/pure-ftpd/doc/README.Virtual-Users

    Code:
    pure-pw userdel login [-f passwd_file] [-F puredb_file] [-m]
    pure-pw passwd login [-f passwd_file] [-F puredb_file] [-m]
    pure-pw show login [-f passwd_file] [-m]
    pure-pw mkdb [<puredb_database_file> [-f passwd_file]] [-F puredb_file]
    pure-pw list [-f passwd_file]
    list all pure-ftpd created virtual FTP users
    Code:
    pure-pw list
    Code:
    pure-pw list
    ftpuser             /usr/local/nginx/html/./                            
    ftpuser2            /usr/local/nginx/html/./                            
    ftpuser3            /usr/local/nginx/html/./                            
    ftpuser4            /home/nginx/domains/domain1.com/./                  
    ftpuser6            /home/nginx/domains/sub.domain1.com/./              
    ftpuser5            /home/nginx/domains/domain2.com/./
    to delete virtual FTP user
    Code:
    pure-pw userdel FTPUSERNAME
    pure-pw mkdb
    change virtual FTP user's password
    Code:
    pure-pw passwd FTPUSERNAME
    pure-pw mkdb
    show full details for an specific pure-ftpd virtual FTP user
    Code:
    pure-pw show FTPUSERNAME
    password is encrypted

    Code:
    pure-pw show ftpuser5
    
    Login              : ftpuser5
    Password           : $1$msgfvdN0$51dhLdPGiCQpQEwtZ30kF1
    UID                : 500 (nginx)
    GID                : 500 (nginx)
    Directory          : /home/nginx/domains/domain2.com/./
    Full name          :
    Download bandwidth : 0 Kb (unlimited)
    Upload   bandwidth : 0 Kb (unlimited)
    Max files          : 0 (unlimited)
    Max size           : 0 Mb (unlimited)
    Ratio              : 0:0 (unlimited:unlimited)
    Allowed local  IPs :
    Denied  local  IPs :
    Allowed client IPs :
    Denied  client IPs :
    Time restrictions  : 0000-0000 (unlimited)
    Max sim sessions   : 0 (unlimited)

    Existing Centmin Mod Nginx vhosts



    For folks with existing Centmin Mod setups with already created Nginx vhosts, you can manually instally pure-ftpd using following commands:

    Code:
    CNIP=$(ip route get 8.8.8.8 | awk 'NR==1 {print $NF}')
    yum -q -y install pure-ftpd
    chkconfig pure-ftpd on
    sed -i 's/LF_FTPD = "10"/LF_FTPD = "3"/g' /etc/csf/csf.conf
    sed -i 's/PORTFLOOD = \"\"/PORTFLOOD = \"21;tcp;5;300\"/g' /etc/csf/csf.conf
    sed -i 's/# UnixAuthentication  /UnixAuthentication  /' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/VerboseLog                  no/VerboseLog                  yes/' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/# PureDB                        \/etc\/pure-ftpd\/pureftpd.pdb/PureDB                        \/etc\/pure-ftpd\/pureftpd.pdb/' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/#CreateHomeDir               yes/CreateHomeDir               yes/' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/# TLS                      1/TLS                      2/' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/# PassivePortRange          30000 50000/PassivePortRange    3000 3050/' /etc/pure-ftpd/pure-ftpd.conf
    sed -i 's/# TLSCipherSuite           HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3/TLSCipherSuite           HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3/' /etc/pure-ftpd/pure-ftpd.conf
    mkdir -p /etc/ssl/private
    openssl req -x509 -days 7300 -sha256 -nodes -subj "/C=US/ST=California/L=Los Angeles/O=Default Company Ltd/CN==$CNIP" -newkey rsa:1024 -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem
    chmod 600 /etc/ssl/private/*.pem
    openssl x509 -in /etc/ssl/private/pure-ftpd.pem -text -noout
    service pure-ftpd restart
    csf -r
    
    Once pure-ftpd is installed, create your FTP username via command below which will lock and jail the YOURFTPUSERNAME to directory path specified by -d /home/nginx/domains/YOURDOMAINVHOST. So you can also lock specific virtual FTP users to other directory paths to if you want.
    Code:
    pure-pw useradd YOURFTPUSERNAME -u nginx -g nginx -d /home/nginx/domains/YOURDOMAINVHOST
    pure-pw mkdb
    service pure-ftpd restart
    
    • where YOURFTPUSERNAME is your FTP username, you will be prompted to create password
    • where YOURDOMAINVHOST is your existing Nginx vhost domain name you already setup

    Compatible FTP clients for SSL/TLS



     
    Last edited: Apr 13, 2015
    • Like Like x 2
    • Informative Informative x 1
  2. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5

    FAQ



    On fresh Centmin Mod .08 installs centmin.sh has a new option PUREFTPD_DISABLED=n. Before initial install, change that to PUREFTPD_DISABLED=y to disable pure-ftpd service post initial install. It's still installed but disabled after install and nginx add vhost menu option 2 in centmin.sh automatically detects PUREFTPD_DISABLED=y and doesn't prompt or do any pure-ftpd virtual ftp user routines and skips those for old method prior to pure-ftpd

    For existing installs, to disable Pure-FTP, just set PUREFTPD_DISABLED=n in centmin.sh and stop the pure-ftpd service
    Code:
    service pure-ftpd stop
    chkconfig pure-ftpd off
    to re-enable
    Code:
    service pure-ftpd start
    chkconfig pure-ftpd on
    Bug reports, feedback and suggestions regarding pure-ftpd virtual FTP user support can be posted in this thread :)

    Test away - ideally on test server first and not live servers ;)

    Malware & Virus Scan FTP Uploaded Files



    One thing that Pure-FTPD users can do is configure automatic malware and virus scans on uploaded files done through Pure-FTPD. Be aware this may potentially increase your cpu and memory usage requirements - especially for large file uploads. To implement automatic malware and virus scanning on uploaded files via Pure-FTPD you need
    1. To install Linux Malware Detect (maldet) and ClamAV scanner via Centmin Mod maldet.sh addon which is available in Centmin Mod .08+ beta03 and higher addons/maldet.sh directory path. Details at Maldet - Linux Malware Detect Addon (discussion) | Centmin Mod Community
    2. Then on Centmin Mod .08+ beta03 and higher you should already have Pure-FTPD support.
    Once maldet.sh addon is installed and with running Pure-FTPD service, you enable pure-ftpd CallUploadScript support and setup the the called shell script clamscan.sh which is invoked each time a file is uploaded via Pure-FTPD virtual FTP user.

    Create a file named setup-callupload.sh and place in file the contents. This script properly sets up what is needed to enable CallUploadScript in pure-ftpd.conf, setup the clamscan.sh shell script which runs each time files are uploaded and runs the pure-uploadscript in background. Any infections are reported in /var/log/clamscan-pureftpd.log and normal uploads are logged in /var/log/pureftpd.log.
    Code:
    #!/bin/bash
    
    sed -i 's|^#CallUploadScript yes|CallUploadScript yes|g' /etc/pure-ftpd/pure-ftpd.conf
    
    cat >/etc/pure-ftpd/clamscan.sh<< EOF
    #!/bin/bash
    /usr/bin/clamdscan --remove --quiet --no-summary "\$1" --log=/var/log/clamscan-pureftpd.log
    EOF
    
    chmod +X /etc/pure-ftpd/clamscan.sh
    
    pure-uploadscript -B -r /etc/pure-ftpd/clamscan.sh
    
    echo "pure-uploadscript -B -r /etc/pure-ftpd/clamscan.sh" >> /etc/rc.local
    
    service pure-ftpd restart
    
    then chmod +x and run script
    Code:
    chmod +x setup-callupload.sh
    ./setup-callupload.sh
     
    Last edited: Jul 18, 2015
    • Like Like x 1
  3. Inforit

    Inforit Premium Member Premium Member

    42
    12
    8
    Jul 30, 2014
    Ratings:
    +15
    Local Time:
    2:46 PM
    nginx/1.7.3
    MariaDB 5.5
    This is great update, I am sure there are quite a few users ready to test this out, thanks @eva2000 :)
     
    • Like Like x 1
  4. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    For folks who are security conscious, you can even disable pure-ftpd when not in use and only enable it when needed.

    stop pure-ftpd service
    Code:
    service pure-ftpd stop
    start pure-ftpd service
    Code:
    service pure-ftpd start
     
    • Like Like x 1
  5. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    On my manual tests using the same command:

    Code:
    pure-pw useradd YOURFTPUSERNAME -u nginx -g nginx -d /home/nginx/domains/YOURDOMAINVHOST
    the user was able to view other folders/files before this directory :(

    Is it the same with your implementation?

    I hope to be able to test it next week....
     
  6. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    how you viewing the files via ftp what ftp client ? i get permission denied or no such directory when trying to access /home, /home/nginx or /home/nginx/domains

    i.e.
    Code:
    Status:    Retrieving directory listing of "/home/nginx"...
    Command:    CWD /home/nginx
    Response:    550 Can't change directory to /home/nginx: No such file or directory
    Error:    Failed to retrieve directory listing
    Code:
    Status:    Retrieving directory listing of "/home/nginx/domains/demodomain.com/public"...
    Command:    CWD /home/nginx/domains/demodomain.com/public
    Response:    550 Can't change directory to /home/nginx/domains/demodomain.com/public: No such file or directory
    Error:    Failed to retrieve directory listing
    
    @pamamolf moved posts to dedicated discussion thread
     
    Last edited: Jan 19, 2015
  7. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    If i remember correct it was Winscp and Filezilla....

    But it should work with any ftp client..
     
    Last edited: Jan 19, 2015
  8. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    after running pure-pw command did you make sure to run pure-pw mkdb so the changes take effect ?
     
  9. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    I don't think so :)

    Ok i will test it on one centminmod server with existing vhost and if i have any problem i will post here :)

    Do you plan to add it on a separate menu for existing domains?

    Thanks
     
  10. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    might end up as a submenu under menu option 2 :)
     
    • Like Like x 1
  11. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    That will be great as the most existing users have vhosts already setup but also for new users many will need this functionality after installing vhosts :)
     
  12. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
  13. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5

    Direct FS_METHOD for Wordpress



    If you're using Wordpress, pure-ftpd virtual FTP user setup might not work with Wordpress uploads so need to enable Direct FS Method. See How to Update WordPress Automatically Without Using FTP [Quicktip]

    so edit wp-config.php and add to very bottom of other lines add this line

    Code:
    define('FS_METHOD','direct');
     
  14. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    Is it possible all the uploaded files on public folder to auto get nginx:nginx permissions?
     
  15. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    on working pure-ftpd virtual FTP user setup in Centmin Mod .08 betas, uploaded files when uploaded as virtual FTP user should auto be set to nginx user/group

    I just checked and uploaded a newfile.txt and image worldflags_demo_compare_190315_00.png to test account and they are owned by nginx:nginx user/group
    Code:
     public]# ls -lah
    total 120K
    drwxr-s--- 2 nginx nginx 4.0K Mar 31 19:14 .
    drwxr-s--- 6 nginx nginx 4.0K Mar 31 19:07 ..
    -rw-r----- 1 nginx nginx 1.6K Mar 31 19:07 403.html
    -rw-r----- 1 nginx nginx 1.6K Mar 31 19:07 404.html
    -rw-r----- 1 nginx nginx 2.1K Mar 31 19:07 500.html
    -rw-r----- 1 nginx nginx 2.1K Mar 31 19:07 502.html
    -rw-r----- 1 nginx nginx 2.2K Mar 31 19:07 503.html
    -rw-r----- 1 nginx nginx 2.1K Mar 31 19:07 504.html
    -rw-r----- 1 nginx nginx 2.2K Mar 31 19:07 50x.html
    -rw-r----- 1 nginx nginx 1.4K Mar 31 19:07 index.html
    -rw-r----- 1 nginx nginx 2.2K Mar 31 19:07 maintenance.html
    -rw-r--r-- 1 nginx nginx    0 Mar 31 19:14 newfile.txt
    -rw-r--r-- 1 nginx nginx  76K Mar 31 19:14 worldflags_demo_compare_190315_00.png
     
  16. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    Made an update just now. I added a new update to Centmin Mod .08 beta 02 that you might want to set too via these 2 commands. It changes default created virtual FTP user files/directories to tighter permissions of 0640/0750 respectively instead of 0644/0755 respectively for files/directories. @jeffwidman would like this :)

    Code:
    sed -i 's/Umask                       133:022/Umask                       137:027/' /etc/pure-ftpd/pure-ftpd.conf
    service pure-ftpd restart
     
    Last edited: Apr 1, 2015
  17. pamamolf

    pamamolf Well-Known Member

    2,515
    230
    63
    May 31, 2014
    Ratings:
    +392
    Local Time:
    4:46 PM
    Nginx-1.13.x
    MariaDB 10.1.x
    Great Thanks :)
     
  18. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    Next .08 update will attempt to tighten security for pure-ftpd's password creation allowing auto generation of a stronger password as well as option for user set password but with weak password checking.

    example of auto generation of pure-ftpd virtual FTP password
    Code:
    Create FTP username for vhost domain (enter username): user1
    Do you want to auto generate FTP password [y/n]: y
    
    FTP username you entered: user1
    FTP password you entered: lRCrjZiw2nKywXg5RAb
    example of user set password with weak password checking
    Code:
    Create FTP username for vhost domain (enter username): user1
    Do you want to auto generate FTP password [y/n]: n
    Create FTP password for user1 (enter password): pass
    !! password strength not strong enough !!
    !! do not use common dictionary words !!
    !! do not use short passwords !!
    !! do not use simplistic passwords !!
    
    re-enter FTP password for user1 (enter password): pass123
    !! password strength not strong enough !!
    !! do not use common dictionary words !!
    !! do not use short passwords !!
    !! do not use simplistic passwords !!
    
    re-enter FTP password for user1 (enter password): password
    !! password strength not strong enough !!
    !! do not use common dictionary words !!
    !! do not use short passwords !!
    !! do not use simplistic passwords !!
    
    re-enter FTP password for user1 (enter password): ahjcfhgieg3
    
    FTP username you entered: user1
    FTP password you entered: ahjcfhgieg3
    change committed to Centmin Mod .08 beta 02 strengthen pure-ftpd virtual FTP user password creation for .08 beta · centminmod/centminmod@2cdfc20 · GitHub
     
  19. AlekseY

    AlekseY Member

    47
    4
    8
    Feb 18, 2015
    Ratings:
    +7
    Local Time:
    4:46 PM
    eva2000,
    or tell me where are the configs for the pure-ftp ssl
     
  20. eva2000

    eva2000 Administrator Staff Member

    29,008
    6,580
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +9,770
    Local Time:
    11:46 PM
    Nginx 1.13.x
    MariaDB 5.5
    not sure i understand your question, you want to use a paid ssl certificate instead ? Pure-ftpd self signed certificate is at /etc/ssl/private/pure-ftpd.pem you need to replace it with paid ssl certificate - see http://download.pureftpd.org/pub/pure-ftpd/doc/README.TLS