Re: [Proftpd-user] FTPS Cipher listing
Matus UHLAR - fantomas <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
On 23.09.19 11:26, Jason Byers via Proftp-user wrote: >I fought with this for a couple weeks and there is not much info out there. > We have security scans of servers run regularly and they always flagged my > SFTP install. This was the setting I got down too that supported the most > customers and was secure enough that it didnt set off warnings on the > security scanners. > > SFTPCiphers aes128-ctr aes192-ctr aes256-ctr blowfish-ctr 3des-ctr > SFTPDigests hmac-sha2-256 hmac-sha2-512 hmac-sha1 hmac-ripemd160 [email protected] > >This was several months ago so I cant tell you the total logic behind it. Hope this helps! note that SFTP is not FTPS. SFTP is FTP-extension of SSH protocol, while FTPS is FTP over SSL. They have different configuation directives and are used by different clients. >----- Original Message ----- >From: mustafa mujahid ([email protected]) >Date: 09/23/19 09:09 >To: [email protected] >Subject: [Proftpd-user] FTPS Cipher listing > >Hi All, >I have been trying to test which ciphers are supported by my proftpd FTPS server. Using sslscan and some other testing tools, but I am unable to get an output from anyone. In the docs: >Syntax: TLSCipherSuite cipher-list >Default: DEFAULT:!ADH:!EXPORT:!DES > > >What is default? > > >how can I test ciphers that I set through the TLSCipherSuite setting whether they are actually set or not? -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Quantum mechanics: The dreams stuff is made of. _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html