vsftpd SSL Support & hardening

Author: ioannidesalex

install/ubuntu/18.04/vsftpd/vsftpd.conf

@@ -20,8 +20,21 @@ ascii_download_enable=YES
 allow_writeable_chroot=YES
 seccomp_sandbox=NO
 pasv_enable=YES
+pasv_promiscuous=YES
 pasv_min_port=12000
 pasv_max_port=12100
 max_per_ip=10
 max_clients=100
 use_localtime=YES
+utf8_filesystem=YES
+ssl_enable=YES
+allow_anon_ssl=NO
+require_ssl_reuse=NO
+ssl_ciphers=HIGH
+ssl_tlsv1=YES
+ssl_sslv2=NO
+ssl_sslv3=NO
+force_local_data_ssl=NO
+force_local_logins_ssl=NO
+rsa_cert_file=/usr/local/vesta/ssl/certificate.crt
+rsa_private_key_file=/usr/local/vesta/ssl/certificate.key