ftpd.1m (2010 09)

f
ftpd(1M) ftpd(1M)
needpass ftpd requests a password even if the FTP client certificate
has been successfully verified.
cipher=OPTION
Specifies the cipher suite to be used during TLS negotiation. The default
cipher suite used is: ALL:!ADH:RC4+RSA:+SSLv2:@STRENGTH
config=file
Specifies the ftpd TLS configuration file. The
-z flags and -z options can be
specified in this file (without the
-z prefix) instead of specifying them on the
command line. The configuration file does not have a default value. This file
can contain comments marked by a
#
at the beginning of a line. This file is
useful when
inetd imposes a restriction on the length for parameters that
can be specified on the command line for the
ftpd server entry.
Note: The TLS configuration flags and options specified in the command line
have precedence over the flags and options in the TLS configuration file.
crlfile=file
Provides the location of the Certificate Revocation List file in PEM format for
ftpd. The default value is /etc/ftpd/security/ftpd-crl.pem
.
crldir=dir
Provides the directory containing Certificate Revocation List files in PEM for-
mat for ftpd. The default value is /etc/ftpd/security/crl/
.
debug=level
Enables TLS debugging for ftpd. level can be either 1 or 2.Iflevel is
1,
ftpd logs the entire TLS related configuration information into syslog.If
level is 2, ftpd logs the extended TLS related debug information into sys-
log. The debug=2 option is used with the -z logalldata option.
WARNING: HP recommends to not set level to a value greater than 2 which
will cause
ftpd to flood syslog with huge log messages. A level with a
value of more than 2 is provided only for troubleshooting
ftpd problems.
dhparam=file
Specifies the file in PEM format that contains Diffie-Hellman parameters for
ftpd. The default value is:
/etc/ftpd/security/ftpd-dhparam.pem
.
dsacert=file
Specifies the file in PEM format that contains DSA certificate for ftpd
. The
default value is
/etc/ftpd/security/ftpd-dsa-cert.pem
.
dsakey=file
Specifies the file in PEM format that contains DSA private key for ftpd. The
default value is
/etc/ftpd/security/ftpd-dsa-key.pem.
rsakey=file
key=file Specifies the file in PEM format that contains RSA private key for
ftpd. The default value is
/etc/ftpd/security/ftpd-rsa-key.pem.
password=value
Specifies the password to decrypt the encrypted private key PEM file.
Note: if
ftpd is configured to used a password protect private key file, then
this option must be set. Otherwise ftpd will block permanently.
randfile=file
Specifies the file that contains random data for ftpd. There is no default
value for this option.
systemcertdir=dir
Specifies the directory that contains the certificate mapping files for system-
wide certificate mapping. There is no default value for this option.
4 Hewlett-Packard Company − 4 − HP-UX 11i Version 3: September 2010