Unable to create cert.

magic_ · 08-29-2007, 02:16 AM

Hey,

I am using ioftpd version 6.2.1 and have a fresh install. No scripts at the moment installed.

At the moment when i execute my bat file in FlashFXP the hourglass appears until the client timeouts. This is what flashfxp shows:

Code:

[R] site exec kebabfabriken.bat
[R] Connection lost: kebabfabriken

I do not get any errors in logs.

My SSL section in ioftpd.ini looks like this:

Code:

# Encryption - See "Permissions" section below for syntax. The default
# allows anyone to connect to the server.
#
# To force everyone (a good idea!) to use secure connections except for
# the default ioFTPD account which is configured to only allow connections
# from the same machine as the server use
#    Require_Encrypted_Auth  = !-ioFTPD *
#    Require_Encrypted_Data  = !-ioFTPD *
#
Require_Encrypted_Auth  = !*
Require_Encrypted_Data  = !*

#
#                >>>>>>>>>>>> SSL CHANGE THIS <<<<<<<<<<<<<<
#
# After you have created your certificate, change this to the name you used
# which should be your dynamic DNS name, your fixed external IP address, or
# if you have neither of those a made up descriptive name for you server.
# Since all locally generated certificates will report as being unverified
# you might as well get rid of clients also complaining your cert name doesn't
# match your DNS name or IP address.
;Certificate_Name        = ioFTPD

Explicit_Encryption     = True
# limit encryption to a particular type: SSL2, SSL3, TLS
# leave this undefined to support any of them
;Encryption_Protocol     = SSL3
# Don't set min higher than 128 or non-Vista FTP clients not built with openSSL
# won't be able to connect...
#Min_Cipher_Strength     = 128
#Max_Cipher_Strength     = 256

# IDNT command handler
Get_External_Ident      = True

# Traffic Balancing
;Data_Devices            =
;Random_Devices          = True

I have created a .bat file that contains this:

makecert.exe -r -n "CN=kebabfabriken"-eku 1.3.6.1.5.5.7.3.1 -ss my -sr CurrentUser -a sha1 -sk kebabfabriken -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12

I put makecert.exe, certmgr.exe, kebabfabriken.bat in a folder that i access when using Flashfxp and i have chmod:ed that folder to 777. I am using the ioFTPD account so i should have maximum permission. ioftpd is installed as a service and using the local system account option to log on. Is this incorrect?

Does anyone know what I am doing wrong?