The -tlsDSAkeyFile option is used to specify a file which contains the private DSA server key in PEM format.
If both an X.509 client certificate and a private server key are contained in the same file (see the -tlsDSAcertificateFile option on "-tlsDSAcertificateFile"), the -tlsDSAkeyFile option need not be specified.
As it should be possible to start up the FTP server automatically in unattended operation, no passphrase may be entered for the private server key at server startup. You must therefore remove any existing encryption of the private key with a passphrase. In this event, ensure that unauthorized persons cannot access this key.
-tlsDSAkeyFile |
<file-name 1..54> | *NONE |
<file-name 1..54>
Name of the file which contains the private DSA server key.
*NONE
No separate file is used for the DSA server key.
*NONE is the default.