FileZilla-Server endangers SSL-connections!

[Alex]

After creation of the Security Certificate via FileZilla-Server v0.9.37 beta keeps PRiVATE_KEY into the Security_Certificate!
It is wrong and is inadmissible!
As a result of creation of the Security Certificate 2 files should be created:

1. A file containing PRiVATE_KEY, for example 'pgp1.skey'
2. A file containing SECURiTY_CERTiFiCATE.

(!) Inside of the Security Certificate should NOT be located PRiVATE KEY!
SECURiTY CERTiFiCATE is intended for free distribution in Internet and should NOT contain confidential data!
PRiVATE KEY should be stored only at the Owner of the Security Certificate.

This dangerous mistake is necessary for correcting URGENTLY since FileZilla Server subjects to the big risk of many users, exchanging confidential data.

I have attached the sample of the CERTIFICATE created by means of FileZilla-Server v0.9.37 beta (inside of a file contains RSA_PRiVATE_KEY).

P.S.
As a whole I express gratitude for very useful and convenient program FileZilla FTP Client!

[Alex]

Security_Certificate contains RSA_PRiVATE_KEY !!!

[Tim Kosse]

Not critical as this bug is not a remotely exploitable security vulnerability.

[Kurt McKee]

Triage suggestion

There has been no movement on this ticket in 6 years.

I recommend closing the ticket as "wontfix" (unless it's been fixed, of course!).

[Kurt McKee]

Hopefully this has been fixed in the last eight years, but since there have been no additional changes to this ticket, I'm closing it.