Page 1 of 2

How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-10-29 00:23
by mikeshick
I'm not sure what I put for
Distinguished Name

or

Hostname

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-10-29 07:55
by botg
Enter all the hostnames the server will be reachable under from the Internet.

The distinguished name (DN) provides details about the certificate subject, such as name and company details. It's a comma-separated list of relative distinguished names (RDN). You can leave if empty.

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-11-12 15:41
by xincun
Creating a certificate in the old version is step-by-step and includes various options. Is there a complete example or step-by-step guide for the new version?

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-11-15 09:12
by botg
Not yet.

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-11-17 15:06
by alho
Getting "Path must be absolute" on try to "Regenarate" button

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2021-11-22 07:27
by boco

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-02-11 07:20
by xincun
boco wrote:
2021-11-22 07:27
Try the latest Nightly.

https://filezilla-project.org/nightly.php?type=server
1.2/1.3 still no example steps and options to create a self-signed certificate. Don't know the details of the certificate in use.

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-02-11 14:56
by boco
My post was in response to the previous one. Regarding your enhancement requests, @botg's answer is still valid.

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 04:34
by MidnightInAurora
Just installed 1.3 and it seems to be working well. Nice upgrade from 0.9.

I have a TLS cert question. I can create a self-signed cert, but only with a 2nd level domain name; i.e., thisdomain.com.

Our development server doesn't have a domain name, just a Windows Server 2019 computer name; i.e., DEVELOPMENT-2019.

Is there a way to put the computer name in the Certificate Data Hostnames field?

Thanks.

Jim

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 09:30
by oibaf
Next release will remove the need for a 2nd level domain name in self-signed certificates.

For now, as a workaround don't use a domain name at all for the self-signed certificate, and if you still want the certificate to contain the computer name, you can put that into the distinguished name field, with a line like the following:

Code: Select all

CN=<computer name>

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 12:22
by MidnightInAurora
oibaf wrote:
2022-03-03 09:30

Code: Select all

CN=<computer name>
"CN=" worked. Thank you for taking the time to answer my question.

Jim

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 19:53
by rbehnfeldt
Convenient this thread is active. I was trying to generate a self-signed cert, but putting in the name that the server is reachable from on the internet (e.g. google.com), with the sub domain included (ftp.google.com), or even just the public IP address (X.X.X.X) results in failing to generate the ticket. Filezilla server version 1.2

After I wrote this I found that the solution was to leave the distinguished name blank for anyone who comes around looking for an answer. Good Luck!

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 21:19
by oibaf
rbehnfeldt wrote:
2022-03-03 19:53
Convenient this thread is active. I was trying to generate a self-signed cert, but putting in the name that the server is reachable from on the internet (e.g. google.com), with the sub domain included (ftp.google.com), or even just the public IP address (X.X.X.X) results in failing to generate the ticket. Filezilla server version 1.2

After I wrote this I found that the solution was to leave the distinguished name blank for anyone who comes around looking for an answer. Good Luck!
What were you inserting in the Distinguished Name? You don't need to leave it blank, but it must contain correct data.

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-03-03 22:41
by botg
oibaf wrote:
2022-03-03 21:19
it must contain correct data
Syntactically correct at least. You can claim to be the reptile space pope and the server will gladly accept it :mrgreen:

Re: How do I generate a TLS Certificate so I can use FTPS

Posted: 2022-05-07 15:48
by xincun
Where is the certificate?

Unable to view certificate details, such as encryption protocol.

No example.

x509 Certificate Fields: Email Address (E) error.