Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are in the process of making our site PCI compliant. One of the vulnerabilities we are facing is as below.

Description: SSL Version 2 (v2) Protocol Detection (for ftp)
Synopsis: The remote service encrypts traffic using a protocol with known weaknesses.
Resolution: Purchase or generate a proper certificate for this service.

Another one is as below (the program is again FTP)

Description: SSL Certificate Cannot Be Trusted
Synopsis: The SSL certificate for this service cannot be trusted.
Resolution: Purchase or generate a proper certificate for this service.

After studying things I think we need to purchase a SSL certificate for FTP. Now I have some questions

1) When I try to purchase an SSL certificate for FTP there is no option for SSL 
 certificate specific for FTP.  So which should we buy? I know this might 
 depend on my security company (like Thwate, Verisign etc..) but if possible 
 then can someone give an example?

2) Our site does have HTTP SSL and it is installed perfectly and working 
 perfectly so will the same certificate (HTTP SSL Certificate) 
 work for FTP too??

3) Which should we configure here, FTPS or SFTP?
share|improve this question
up vote 3 down vote accepted

1) You can buy a Webserver certificate, it will work.

2) If the CN ( is the same, it will work.

3) FTPS and SFTP are not the same :

  • FTPS is FTP over SSL/TLS.
  • SFTP is FTP over SSH.

In your case, it is FTP(S).

share|improve this answer
thx for the answer and +1 for helping me .. i am using servu ftp server .. i just need to install my HTTP SSL there and my FTPS will start working right ?? – Dhaval Dec 4 '13 at 16:02
Yes, but if your CN is different you will have an error at the client side. – Vinz Dec 4 '13 at 16:22
no .. both are same .. and thx for all ur help .. i will accept your answer after sometime – Dhaval Dec 4 '13 at 16:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.