WU-FTPD 2.6.1 Release Notes for HP-UX 11i v1, HP-UX 11i v2 and HP-UX 11i v3

• Using the TLS configuration file. To use the configuration file, specify the
following option as part of the command-line argument for ftpd(1M):
ftpd –z config=/etc/ftpd/security/tls.conf
5. Use one or more of the following options to configure TLS:
allow_auth_ssl
bad_auth_ssl_reply
certsok
clientcert
logalldata
protect_user/tlsonly
tlsdata
usetls
CAfile=file
CApath=dir
authmode=OPTION
cert/rsacert=file
certpass=OPTION
cipher=OPTION
config=file
crlfile=file
crldir=dir
debug=level
dhparam=file
dsacert=file
dsakey=file
key/rsakey=file
password=value
randfile=file
systemcertdir=dir
For information on the configuration options, see ftpd(1M).
NOTE: The TLS configuration flag usetls enables TLS security mechanism in
ftpd(1M). Therefore, if you do not enable this flag, you cannot configure ftpd(1M) with
TLS even if you enable all other TLS configuration flags and options.
Configuring an FTP Client in a TLS/SSL Environment
To configure an FTP client in a TLS/SSL environment, complete the following steps:
1. Ensure that the OpenSSL software in installed in the system.
2. Ensure that the ftp-ssl-ncf FTP TLS enhancement software is installed in the
system. Run the following command to ensure that the software is installed:
# swlist -l product | grep ftp-ssl-ncf
The following output is displayed if the software is installed in the system:
ftp-ssl-ncf B.11.23.01.001 ftp-ssl-ncf web release
3. Configure the OpenSSL certificates and keys before you start the FTP client.
WU-FTPD 2.6.1 Features 19