Re: [Proftpd-user] FTPS Cipher listing
Jason Byers via Proftp-user <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
I fought with this for a couple weeks and there is not much info out there. We have security scans of servers run regularly and they always flagged my SFTP install. This was the setting I got down too that supported the most customers and was secure enough that it didnt set off warnings on the security scanners. SFTPCiphers aes128-ctr aes192-ctr aes256-ctr blowfish-ctr 3des-ctr SFTPDigests hmac-sha2-256 hmac-sha2-512 hmac-sha1 hmac-ripemd160 [email protected] This was several months ago so I cant tell you the total logic behind it. Hope this helps! ----- Original Message ----- From: mustafa mujahid ([email protected]) Date: 09/23/19 09:09 To: [email protected] Subject: [Proftpd-user] FTPS Cipher listing Hi All, I have been trying to test which ciphers are supported by my proftpd FTPS server. Using sslscan and some other testing tools, but I am unable to get an output from anyone. In the docs: Syntax: TLSCipherSuite cipher-list Default: DEFAULT:!ADH:!EXPORT:!DES What is default? how can I test ciphers that I set through the TLSCipherSuite setting whether they are actually set or not? Any help would be much appreciated! Best Regards. _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html