Re: [Proftpd-user] FTPS Cipher listing
Ian via Proftp-user <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
Proftp uses OpenSSL for as the TLS lib. per OpenSSL . https://www.openssl.org/docs/man1.0.2/man1/ciphers.html
DEFAULT The default cipher list. This is determined at compile time and is normally ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2. When used, this must be the first cipherstring specified.
>Syntax: TLSCipherSuite cipher-list
>Default: DEFAULT:!ADH:!EXPORT:!DES
would resolved to ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2::!ADH:!DES
During compilation of Proftp, additional flags may have been added or removed
On Monday, September 23, 2019, 10:10:18 AM PDT, Matus UHLAR - fantomas <[email protected]> wrote:
On 23.09.19 11:26, Jason Byers via Proftp-user wrote:
>I fought with this for a couple weeks and there is not much info out there.
> We have security scans of servers run regularly and they always flagged my
> SFTP install. This was the setting I got down too that supported the most
> customers and was secure enough that it didnt set off warnings on the
> security scanners.
>
> SFTPCiphers aes128-ctr aes192-ctr aes256-ctr blowfish-ctr 3des-ctr
> SFTPDigests hmac-sha2-256 hmac-sha2-512 hmac-sha1 hmac-ripemd160 [email protected]
>
>This was several months ago so I cant tell you the total logic behind it. Hope this helps!
note that SFTP is not FTPS. SFTP is FTP-extension of SSH protocol, while
FTPS is FTP over SSL. They have different configuation directives and
are used by different clients.
>----- Original Message -----
>From: mustafa mujahid ([email protected])
>Date: 09/23/19 09:09
>To: [email protected]
>Subject: [Proftpd-user] FTPS Cipher listing
>
>Hi All,
>I have been trying to test which ciphers are supported by my proftpd FTPS server. Using sslscan and some other testing tools, but I am unable to get an output from anyone. In the docs:
>Syntax: TLSCipherSuite cipher-list
>Default: DEFAULT:!ADH:!EXPORT:!DES
>
>
>What is default?
>
>
>how can I test ciphers that I set through the TLSCipherSuite setting whether they are actually set or not?
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Quantum mechanics: The dreams stuff is made of.
_______________________________________________
ProFTPD Users List <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
_______________________________________________
ProFTPD Users List <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html