测试
lftp
set ftp:ssl-force ture
connect 127.0.0.1
login jack
Password:
案例:
yum list all |grep wireshark
yum install -y wireshark
rpm -ql wireshark
tshark -ni eth0 -R "tcp.dstport eq 21"
service vsftpd restart
windows
ftp 192.168.101.200
user1
123
里捕捉到账号和密码,显得不安全
cd /etc/pki/
vim tls/openssl.cnf
45行 dir =/etc/pki/CA
88 90 match 改為 optional
cd CA
mkdir crl certs newcerts
touch index.txt serial
echo "01" >serial
openssl genrsa 1024 >private/cakey.pem
openssl req -new -x509 -key private/cakey.pem -out cacert.pem -days 3650 BEIJING
chmod 600 private/cakey.pem
mkdir /etc/vsftpd/certs/
cd /etc/vsftpd/certs/
openssl genrsa 1024 >vsftpd.key
openssl req -new -key vsftpd.key -out vsftpd.csr
HENAN zzdx tec ftp.zzdx.com
vim /etc/vsftpd/vsftpd.conf
120 行
force_local_logins_ssl=YES
force_local_data_ssl=YES
ssl_enable=YES
ssl_tlsvl=YES
ssl_sslv2=YES
ssl_sslv3=YES
rsa_cert_file=/etc/vsftpd/certs/vsftpd.cert
rsa_private_key_file=/etc/vsftpd/certs/vsftpd.key
service vsftpd restart
tshark -ni eth0 -R "tcp.dsport eq 21"
windows
ftp 192.168.101.200
anonymous
安装FlashPXP4_1548_Setup.exe
创建站点