Article describes how to get
StartSSL certificates working with vsftpd. First of all read
how to get free ssl certificate from StartSSL and actually create certificates.
cat www_certificate.pem > /etc/ssl/certs/vsftpd.pem
cat www_privatekey.pem > /etc/ssl/private/vsftpd.pem
chown root:ssl-cert /etc/ssl/private/vsftpd.pem
chmod 644 /etc/ssl/private/vsftpd.pem
chown root:root /etc/ssl/certs/vsftpd.pem
chmod 444 /etc/ssl/certs/vsftpd.pem
The SSL portion of the vsftpd config should look something like this.
rsa_cert_file=/etc/ssl/certs/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/vsftpd.pem
ssl_enable=YES
force_local_data_ssl=NO
force_local_logins_ssl=NO
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO