secure vsftpd ssl tls

configure vsftpd to use TLS/SSL

root@vm1:~# cat /etc/vsftpd.conf | grep -v "^#"
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/vsftpd.pem
ssl_enable=YES  #
allow_anon_ssl=NO #
force_local_data_ssl=YES #
force_local_logins_ssl=YES #
ssl_tlsv1=YES #
ssl_sslv2=NO #
ssl_sslv3=NO #
listen=YES#
anonymous_enable=NO  #
local_enable=YES #
write_enable=YES  #
local_umask=022
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
ftpd_banner=Warning !!! All activities are logged.
chroot_local_user=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
allow_writeable_chroot=YES
pasv_enable=Yes
pasv_min_port=40000
pasv_max_port=40100
require_ssl_reuse=NO
ssl_ciphers=HIGH

##GEnerate ssl certificate
sudo openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout /etc/ssl/private/vsftpd.pem -out /etc/ssl/private/vsftpd.pem


# service vsftpd restart
vsftpd stop/waiting
vsftpd start/running, process 3096

###### FTP client connection

open filezilla
File - > site manager ->
host:  ip or hostname
protocol: FTP
Encryption: Require explicit FTP over TLS
Logontype: Normal
User:  terminator1
Password: ***********

OK <finish>

Now connect