1

I secured our server with Let's Enccrypt SSL certificate, which I installed with Certbot on Apache. It works great - I validated it with online SSL checkers.

However, Filezilla FTP client always shows a message:

Uknown certificate | my.domain.com:21 - Hostname does not match certificate

If I accept it and ignore the warning, it still works, but I don't think it's a good security practice.

I ran hostname on Linux server and it's set correctly to "my.domain.com". I've also ran sudo certbot certificates to see Certbot certificates and it looks OK:

john123@my:~$ sudo certbot certificates
[sudo] password for john123:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
  Certificate Name: my.domain.com
    Domains: my.domain.com
    Expiry Date: 2021-07-12 01:43:40+00:00 (VALID: 48 days)
    Certificate Path: /etc/letsencrypt/live/my.domain.com/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/my.domain.com/privkey.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

What could be the problem? See this screenshot for more details if needed:

enter image description here

1

FTP is a seperate service to https, normally handled with different software.

You likely need to update the certificate settings for the FTP server and restart it.

1
  • Thanks, that might be it, checking. I have a different certificate in /etc/vsftpd.conf. – c0dehunter May 24 at 10:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.