[cobalt-security] SSL FTP or SCP?

["Shaun Johnston" <shaun@xxxxxxxxxxxxxxxx>]

Hi

I'm looking at securing FTP access to a Raq4.  We're using a Thawte SSL cert
for secure http connections.  Is it possible configure ProFTDd to use the
same cert to encrypt FTP sessions?  There are a number of clients available
that support FTP via SSL but I'm not sure which daemon would be best suited.
Any help would be appreciated.

Also - I use WinSCP to connect to the Raq for file transfers, so I thought
SCP may be a viable alternative to FTP via SSL.    Obviously, there are
issues with read access to off-limits directories etc using shell access, so
is it possible to chmod everything outside of /home/sites (eg. /etc, /lib,
/usr etc etc) to 750 instead of 755, and also the /home/sites directory
itself (non-recursive) to 750 without it affecting the way the system
operates?

Thanks,

Shaun Johnston