Can't get VSFTP to work over SSL!! :(

Ok - I'm going bonkers over this one, so any help would be greatly appreciated!

I am trying to get the latest version of vsftp to work (2.0.2). I have openssl-0.9.7b installed. I modified the builddefs.h and tunables.c files to use SSL. Make is run, binary is copied to /etc/vsftpd/ and modified with ssl_enable=YES.

When I start in standalone mode or connect while running under xinetd, i receive this message:

500 OOPS: SSL: ssl_enable set but SSL support not compiled in.

Here are samples of my vsftpd.conf and /etc/xinetd.d/vsftpd files:

anonymous_enable=NO
ssl_enable=YES
rsa_cert_file=/usr/local/ssl/certs/vsftpd.pem
chroot_local_user=YES

------

service ftp
{
socket_type = stream
wait = no
user = root
server = /usr/local/sbin/vsftpd
server_args = /etc/vsftpd/vsftpd.conf
log_on_success += PID HOST DURATION USERID
log_on_failure += USERID
nice = 10
disable = no
}

Thanks for looking!

Chris

can you paste all of the output you get from ./configure? I suspect you may find that something that was needed for SSL support was missing so it didnt build it into the binary. Looking at the ./configure output may indicate what that was.

Jason

Sure. I'm assuming you mean the output from "make" as there is no Configure with the vsftpd distro. If you mean the output of an openssl config, I guess I can get that for you too...

Let me know! Otherwise, here is the output from make:

gcc -c main.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c utility.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c prelogin.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ftpcmdio.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c postlogin.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c privsock.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c tunables.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ftpdataio.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c secbuf.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ls.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c postprivparent.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c logging.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c str.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c netstr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysstr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c strlist.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c banner.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c filestr.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c parseconf.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c secutil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ascii.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c oneprocess.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c twoprocess.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c privops.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c standalone.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c hash.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c tcpwrap.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ipv6parse.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c access.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c features.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c readwrite.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c ssl.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysutil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -c sysdeputil.c -O2 -Wall -W -Wshadow -idirafter dummyinc
gcc -o vsftpd main.o utility.o prelogin.o ftpcmdio.o postlogin.o privsock.o tunables.o ftpdataio.o secbuf.o l
s.o postprivparent.o logging.o str.o netstr.o sysstr.o strlist.o banner.o filestr.o parseconf.o secutil.o asc
ii.o oneprocess.o twoprocess.o privops.o standalone.o hash.o tcpwrap.o ipv6parse.o access.o features.o readwr
ite.o ssl.o sysutil.o sysdeputil.o -Wl,-s `./vsf_findlibs.sh`

Thanks! :D

Where did u get vsftpd 2.0.2? I can only get 2.0.1 version and it's without SSL support. I was trying to change some header files and link it with openssl but I wasn't succesfull :(

I got it from vsftpd.beasts.org. So I'm glad someone else is having this problem! :?

I emailed Chris to see if he could send me an uncompiled / unconfigured version. I think that is what is needed. From another form, apparently ./Configure --enable-ssl or something to that effect needs to be run in order for it to make use of ssl.

I will keep everyone posted if I hear anything!

Anyone? Ideas? Thoughts? Flames? Anything!?!?!? :lol: