proftpd - TLS - Debian Etch

# proftpd -vv
 - ProFTPD Version: 1.3.0 (stable)
 -   Scoreboard Version: 01040002
 -   Built: Tue Nov 4 14:54:12 UTC 2008
 -     Module: mod_core.c
 -     Module: mod_xfer.c
 -     Module: mod_auth_unix.c
 -     Module: mod_auth_file.c
 -     Module: mod_auth.c
 -     Module: mod_ls.c
 -     Module: mod_log.c
 -     Module: mod_site.c
 -     Module: mod_delay/0.5
 -     Module: mod_dso/0.4
 -     Module: mod_auth_pam.c
 -     Module: mod_readme.c
 -     Module: mod_cap/1.0
 -     Module: mod_ctrls/0.9.4

Include /etc/proftpd/modules.conf
ServerName "xxx.de FTP Server"
ServerType standalone
DeferWelcome off
MultilineRFC2228 on
DefaultServer on
ShowSymlinks on
AllowOverwrite on
TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200
DisplayLogin welcome.msg
DisplayFirstChdir .message
ListOptions "-l"
DenyFilter \*.*/
Port 21
MaxInstances 30
UseIPv6 off
TransferLog /var/log/proftpd/xferlog
SystemLog /var/log/proftpd/proftpd.log
# make proftpd faster / do not perform ident and reverse dns lookup
UseReverseDNS off
IdentLookups off 
# Set the user and group that the server normally runs at.
User nobody
Group nogroup
<Directory /*>
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022
# Normally, we want files to be overwriteable.
AllowOverwrite on
</Directory>
DefaultRoot ~
RequireValidShell off
 
AuthOrder mod_sql.c
SQLAuthTypes Crypt
SQLAuthenticate users* groups*
SQLConnectInfo syscp@localhost syscp xxx
SQLUserInfo ftp_users username password uid gid homedir shell
SQLGroupInfo ftp_groups groupname gid members
SQLUserWhereClause "login_enabled = 'y'"
SQLLog PASS login
SQLNamedQuery login UPDATE "last_login=now(), login_count=login_count+1 WHERE username='%u'" ftp_users
SQLLog RETR download
SQLNamedQuery download UPDATE "down_count=down_count+1, down_bytes=down_bytes+%b WHERE username='%u'" ftp_users
SQLLog STOR upload
SQLNamedQuery upload UPDATE "up_count=up_count+1, up_bytes=up_bytes+%b WHERE username='%u'" ftp_users
 
[B][FONT=Arial]# Einrichtung mittels TLS module:[/FONT][/B]
[B][FONT=Arial]<IfModule mod_tls.c> [/FONT][/B]
[B][FONT=Arial]TLSEngine on[/FONT][/B]
[B][FONT=Arial]TLSLog /var/log/tls.log[/FONT][/B]
[B][FONT=Arial]TLSProtocol SSLv23[/FONT][/B]
[B][FONT=Arial]#TLSProtocol TLSv1[/FONT][/B]
[B][FONT=Arial]TLSOptions NoCertRequest[/FONT][/B]
[B][FONT=Arial]TLSRSACertificateFile /etc/ssl/certs/host.cert[/FONT][/B]
[B][FONT=Arial]TLSRSACertificateKeyFile /etc/ssl/certs/host.key[/FONT][/B]
[B][FONT=Arial]TLSVerifyClient off[/FONT][/B]
[FONT=Arial][B]TLSRequired [/B][/FONT][FONT=Arial][B]off[/B][/FONT]
[FONT=Arial][B]</IfModule>[/B][/FONT]