SSL Certificate (Server Settings)

See Also

 

image\serversettingssslcert.gif

 

This tab only shows when SSL/TLS is enabled for your server, which in turn depends on the server Edition and registration key.

 

The certificate is used for secure-FTP connections and data transfers that use SSL/TLS. When a secure-FTP client connects an "SSL handshake" ensues. Its purpose is to establish the server’s identity, an encryption key for use during that session, and a specific cipher to encrypt the session data with. The SSL handshake works as follows: First, the client sends a list of ciphers it’s willing to support to the server. Next, the server chooses a cipher for use during the subsequent session and sends over its certificate together with a big random number. The certificate tells the client who the server is and it contains an encryption key, called the server’s "public key". The client also creates a large random number and encrypts this using the server’s public key from the certificate. Next the server decrypts the client’s message using its "private key" (that corresponds to the server’s public key). Both client and server now use the random values to create a unique "session key" for encryption of the subsequent session and from there on both sides use that key and the selected cipher to encrypt the rest of their session. That is the SSL handshake in a nutshell, somewhat simplified but it gets the idea across.

 

For secure Web servers a trusted third party, like Verisign that vouches for the server’s identity normally signs the server certificate. In the case of Serv-U’s certificate it is a "self signed" certificate, meaning it is signed by the server itself. This means it does not provide any guarantees for the server’s identity (since you can enter any values you like), but it does give the client a public key for encryption. Any time you make changes to the server’s certificate Serv-U automatically generates a new self-signed certificate with new, random, public and private keys for use by the server.

 

! IMPORTANT – IMPORTANT – IMPORTANT !

If you are going to use Serv-U for secure-FTP you must create your own server certificate. The server's private key needs to be a secret and the default key that gets installed is the same for every installation and thus no secret. To create your own certificate just enter your own certificate values and save them.

 

 

The following entries are part of the SSL certificate:

 

Common name

This should be set to the server’s IP name, or if no IP name is available the server’s IP address. The client normally checks if the certificate’s common name matches with the server’s IP name and will show a warning to the user if not.

E-mail

Set this to the E-mail address you want FTP clients to see.

Organization

Set this to the name of your company or organization, like "Cat Soft, LLC" or "RhinoSoft.com".

 

Unit
This should be set to the organizational unit that owns the certificate, like "Software" or "IT".

 

City/town

Set this to the city or town where you are located.

 

State/province

Set this to the state or province where you are located.

 

Country

This has to be the 2-letter abbreviation of the country where you are located (as defined in the ISO-3166 standard), like "US" for United States. Valid country codes are:

 

Afghanistan AF

Albania AL

Algeria DZ

American Samoa AS

Andorra AD

Angola AO

Anguilla AI

Antarctica AQ

Antigua and Barbuda AG

Argentina AR

Armenia AM

Aruba AW

Australia AU

Austria AT

Azerbaijan AZ

Bahamas BS

Bahrain BH

Bangladesh BD

Barbados BB

Belarus BY

Belgium BE

Belize BZ

Benin BJ

Bermuda BM

Bhutan BT

Bolivia BO

Bosnia and Herzegovina BA

Botswana BW

Bouvet Island BV

Brazil BR

British Indian Ocean Territory IO

Brunei Darussalam BN

Bulgaria BG

Burkina Faso BF

Burundi BI

Cambodia KH

Cameroon CM

Canada CA

Cape Verde CV

Cayman Islands KY

Central African Republic CF

Chad TD

Chile CL

China CN

Christmas Island CX

Cocos (Keeling) Islands CC

Colombia CO

Comoros KM

Congo CG

Congo, The Democratic Republic Of The CD

Cook Islands CK

Costa Rica CR

Côte D'ivoire CI

Croatia HR

Cuba CU

Cyprus CY

Czech Republic CZ

Denmark DK

Djibouti DJ

Dominica DM

Dominican Republic DO

East Timor TP

Ecuador EC

Egypt EG

El Salvador SV

Equatorial Guinea GQ

Eritrea ER

Estonia EE

Ethiopia ET

Falkland Islands (Malvinas) FK

Faroe Islands FO

Fiji FJ

Finland FI

France FR

French Guiana GF

French Polynesia PF

French Southern Territories TF

Gabon GA

Gambia GM

Georgia GE

Germany DE

Ghana GH

Gibraltar GI

Greece GR

Greenland GL

Grenada GD

Guadeloupe GP

Guam GU

Guatemala GT

Guinea GN

Guinea-Bissau GW

Guyana GY

Haiti HT

Heard Island and Mcdonald Islands HM

Holy See (Vatican City State) VA

Honduras HN

Hong Kong HK

Hungary HU

Iceland IS

India IN

Indonesia ID

Iran, Islamic Republic Of IR

Iraq IQ

Ireland IE

Israel IL

Italy IT

Jamaica JM

Japan JP

Jordan JO

Kazakstan KZ

Kenya KE

Kiribati KI

Korea, Democratic People's Republic Of KP

Korea, Republic Of KR

Kuwait KW

Kyrgyzstan KG

Lao People's Democratic Republic LA

Latvia LV

Lebanon LB

Lesotho LS

Liberia LR

Libyan Arab Jamahiriya LY

Liechtenstein LI

Lithuania LT

Luxembourg LU

Macau MO

Macedonia, The Former Yugoslav Republic Of MK

Madagascar MG

Malawi MW

Malaysia MY

Maldives MV

Mali ML

Malta MT

Marshall Islands MH

Martinique MQ

Mauritania MR

Mauritius MU

Mayotte YT

Mexico MX

Micronesia, Federated States Of FM

Moldova, Republic Of MD

Monaco MC

Mongolia MN

Montserrat MS

Morocco MA

Mozambique MZ

Myanmar MM

Namibia NA

Nauru NR

Nepal NP

Netherlands NL

Netherlands Antilles AN

New Caledonia NC

New Zealand NZ

Nicaragua NI

Niger NE

Nigeria NG

Niue NU

Norfolk Island NF

Northern Mariana Islands MP

Norway NO

Oman OM

Pakistan PK

Palau PW

Palestinian Territory, occupied PS

Panama PA

Papua New Guinea PG

Paraguay PY

Peru PE

Philippines PH

Pitcairn PN

Poland PL

Portugal PT

Puerto Rico PR

Qatar QA

Réunion RE

Romania RO

Russian Federation RU

Rwanda RW

Saint Helena SH

Saint Kitts and Nevis KN

Saint Lucia LC

Saint Pierre and Miquelon PM

Saint Vincent and The Grenadines VC

Samoa WS

San Marino SM

Sao Tome And Principe ST

Saudi Arabia SA

Senegal SN

Seychelles SC

Sierra Leone SL

Singapore SG

Slovakia SK

Slovenia SI

Solomon Islands SB

Somalia SO

South Africa ZA

South Georgia and The South Sandwich Islands GS

Spain ES

Sri Lanka LK

Sudan SD

Suriname SR

Svalbard and Jan Mayen SJ

Swaziland SZ

Sweden SE

Switzerland CH

Syrian Arab Republic SY

Taiwan, Province Of China TW

Tajikistan TJ

Tanzania, United Republic Of TZ

Thailand TH

Togo TG

Tokelau TK

Tonga TO

Trinidad and Tobago TT

Tunisia TN

Turkey TR

Turkmenistan TM

Turks and Caicos Islands TC

Tuvalu TV

Uganda UG

Ukraine UA

United Arab Emirates AE

United Kingdom GB

United States US

United States, minor outlying islands UM

Uruguay UY

Uzbekistan UZ

Vanuatu VU

Vatican City State, see Holy See

Venezuela VE

Viet Nam VN

Virgin Islands, British VG

Virgin Islands, U.S. VI

Wallis and Futuna WF

Western Sahara EH

Yemen YE

Yugoslavia YU

Zaire, see Congo, The Democratic Republic Of The

Zambia ZM

Zimbabwe ZW