[TriLUG] help with vsftpd FTPS / TLS -- really needed

[Mark R. Biggers]

Hello,

I am attempting to get 'vsftpd' fully working as a FTPS / TLS service, running
on port 990.  I have Port 989-990 UDP & TCP open, and "passive ports"
5000-5999 open through the IPtables firewall.  I have tested with IPtables
"up" and "down" (firewall stopped, anything ACCEPTed).

The OS is CentOS 6.3, 64-bit.  Latest 'vsftpd' from that install: 
vsftpd-2.2.2-11.el6.x86_64


   My config:

     http://dpaste.com/hold/772180/


   ** Successful connects, including file upload:

   -- Filezilla windows-client @ 3.5.3.  Set for implicit SSL    ## no errors.

   -- lftp -e "debug 4" ftps://depotlddsuser@depot-lab.us.to:990/ ## LFTP, no 
errors


   ** Failures (important!):

   -- openssl s_client -connect depot-lab.us.to:990 -starttls ftp ## just hangs
CONNECTED(00000003)

   -- test Python script.  Times out on ftps.connect().  This *has to work*, 
since it is code extracted from Production use:

       http://dpaste.com/hold/772179/



Any ideas?  A beer for anyone who figures this out!   (TLS and ordinary vsftpd 
logs, have been of little use)

( I have tried a similar config with Proftpd, but it is configured differently 
enough, and it breaks my "successes" -- nothing works for that FTP daemon... 
except openssl s_client, with the same DigiCert )

Thank you for looking!
----mark


-- 
==========================
*biggers ATT utsl DOTT com*
*919 295-4103 work*   desk

//