1. installation

yum -y install vsftpd

2. configuration

vi /etc/vsftpd.conf
anonymous_enable=NO
connect_from_port_20=NO
dirmessage_enable=NO
listen=YES
listen_ipv6=NO
local_enable=YES
local_umask=022
pam_service_name=vsftpd
pasv_min_port=40000
pasv_max_port=50000
tcp_wrappers=NO
write_enable=YES
xferlog_enable=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
#
userlist_deny=NO
userlist_enable=YES
userlist_file=/etc/vsftpd/upm/vsftpd.conf
mkdir -p /etc/vsftpd/upm
vi /etc/vsftpd/upm/vsftpd.conf
cidusr
chmod 400 /etc/vsftpd/upm/vsftpd.conf

3. ssl

mkdir -p /etc/vsftpd/keys
openssl req -x509 -nodes -days 3650 -newkey rsa:1024 -keyout /etc/vsftpd/keys/vsftpd.key -out /etc/vsftpd/keys/vsftpd.pem
chmod 400 /etc/vsftpd/*
vi /etc/vsftpd.conf
///
#
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
rsa_cert_file=/etc/vsftpd/keys/vsftpd.pem
rsa_private_key_file=/etc/vsftpd/keys/vsftpd.key
ssl_enable=YES
ssl_sslv2=NO
ssl_sslv3=NO
ssl_tlsv1=YES

4. service

systemctl enable vsftpd.service
systemctl start vsftpd.service

5. client side

vi ~/.lftprc
set ssl:verify-certificate no