https://www.server-world.info/en/note?os=CentOS_8&p=ftp&f=8

  [root@R430]# mkdir /etc/pki/tls/proftpd/
  [root@R430]# openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/pki/tls/proftpd/proftpd.pem -out /etc/pki/tls/proftpd/proftpd.pem
/etc/proftpd.conf
<file>
<IfModule mod_tls.c>
        TLSEngine on
        TLSRequired on

        TLSRSACertificateFile           /etc/pki/tls/proftpd/proftpd.pem
        TLSRSACertificateKeyFile        /etc/pki/tls/proftpd/proftpd.pem
        TLSCipherSuite                  PROFILE=SYSTEM
        TLSOptions      NoSessionReuseRequired
        TLSLog  /var/log/proftpd/tls.log
        <IfModule mod_tls_shmcache.c>
                TLSSessionCache             shm:/file=/run/proftpd/sesscache
        </IfModule>
</IfModule>
</file>\\

~/.lftprc
<file>
set ftp:ssl-auth TLS
#set ftp:ssl-force true
set ftp:ssl-protect-list yes
set ftp:ssl-protect-data yes
set ftp:ssl-protect-fxp yes
set ssl:verify-certificate no 
</file>