Re: [Proftpd-user] 534 vs 220/550 response for trying to log in when TLSRequired on
Sammy Larbi <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CANsBqfkYtzduwvDuk6UEpG+F=mZjHfksOyB5T=obmmtfPNbM4g@mail.gmail.com> |
On Tue, May 2, 2017 at 10:28 AM, TJ Saunders <[email protected]> wrote: > > > > If you want to require TLS _from the very beginning_, then you have to > > > use "implicit TLS", via the UseImplicitSSL TLSOption. > > > > > > > Thank you. If I wanted to force the use of implicit TLS, would that just > be > > a matter of adding UseImplicitSSL to my TLSOptions in the config, rather > > than putting it under a virtual host as showing in the example at > > http://www.proftpd.org/docs/contrib/mod_tls.html? > > It will depend on whether you want/need to offer plain FTP, or explicit > FTPS, at all -- or whether you just want TLS, all the time. Assuming > the latter, then yes, just adding: > > <IfModule mod_tls.c> > ... > TLSOptions UseImplicitSSL > ... > </IfModule> > > should work. You will also want to ensure/double-check on configuring > your FTPS clients to know that they should use "implicit FTPS"; it's a > slightly different setup for each FTPS client. > The ultimate goal will be to get everyone using implicit FTPS, and phasing out any non-implicit FTPS. So far we already require explicit, so I should be able to work with the 30 or so users to update their configs. Thanks! Sam ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html