Can't get VSFTP to work over SSL!! :(

[technobie]

Ok - I'm going bonkers over this one, so any help would be greatly appreciated!

I am trying to get the latest version of vsftp to work (2.0.2). I have openssl-0.9.7b installed. I modified the builddefs.h and tunables.c files to use SSL. Make is run, binary is copied to /etc/vsftpd/ and modified with ssl_enable=YES.

When I start in standalone mode or connect while running under xinetd, i receive this message:

500 OOPS: SSL: ssl_enable set but SSL support not compiled in.

Here are samples of my vsftpd.conf and /etc/xinetd.d/vsftpd files:

anonymous_enable=NO
ssl_enable=YES
rsa_cert_file=/usr/local/ssl/certs/vsftpd.pem
chroot_local_user=YES

------

service ftp
{
socket_type = stream
wait = no
user = root
server = /usr/local/sbin/vsftpd
server_args = /etc/vsftpd/vsftpd.conf
log_on_success += PID HOST DURATION USERID
log_on_failure += USERID
nice = 10
disable = no
}

Thanks for looking!

Chris

[jasonlambert]

can you paste all of the output you get from ./configure? I suspect you may find that something that was needed for SSL support was missing so it didnt build it into the binary. Looking at the ./configure output may indicate what that was.

Jason

[technobie]

Sure. I'm assuming you mean the output from "make" as there is no Configure with the vsftpd distro. If you mean the output of an openssl config, I guess I can get that for you too...

Let me know! Otherwise, here is the output from make:

gcc -c main.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c utility.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c prelogin.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ftpcmdio.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c postlogin.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c privsock.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c tunables.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ftpdataio.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c secbuf.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ls.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c postprivparent.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c logging.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c str.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c netstr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysstr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c strlist.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c banner.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c filestr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c parseconf.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c secutil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ascii.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c oneprocess.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c twoprocess.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c privops.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c standalone.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c hash.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c tcpwrap.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ipv6parse.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c access.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c features.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c readwrite.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ssl.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysutil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysdeputil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -o vsftpd main.o utility.o prelogin.o ftpcmdio.o postlogin.o privsock.o tunables.o ftpdataio.o secbuf.o l
s.o postprivparent.o logging.o str.o netstr.o sysstr.o strlist.o banner.o filestr.o parseconf.o secutil.o asc
ii.o oneprocess.o twoprocess.o privops.o standalone.o hash.o tcpwrap.o ipv6parse.o access.o features.o readwr
ite.o ssl.o sysutil.o sysdeputil.o -Wl,-s `./vsf_findlibs.sh`

Thanks!

[rat007]

Where did u get vsftpd 2.0.2? I can only get 2.0.1 version and it's without SSL support. I was trying to change some header files and link it with openssl but I wasn't succesfull

[technobie]

I got it from vsftpd.beasts.org. So I'm glad someone else is having this problem!

I emailed Chris to see if he could send me an uncompiled / unconfigured version. I think that is what is needed. From another form, apparently ./Configure --enable-ssl or something to that effect needs to be run in order for it to make use of ssl.

I will keep everyone posted if I hear anything!

[technobie]

Anyone? Ideas? Thoughts? Flames? Anything!?!?!?