[Proftpd-user] Log ciphers & algos

Chris Young <[email protected]>
Newsgroups gmane.network.proftpd.user
Message-ID <CABr7rqPxdPkp0_pDnbUK9PXx9KfYT9MNEnZhB0nPzJphVZvRsQ@mail.gmail.com>
I'd like to prune my allowed digests/ciphers/key-exchanges

I know I have some older, less recommended settings enabled

I could just warn my users and make the change on a scheduled date

But with 1500 regularly active sftp logins tied to "critical processes", I
would prefer to target logins known to be using specific settings that we
plan to deprecate.

Using ExtendedLog, I'm logging SEC and AUTH, and I can see the KEX_INIT and
ECDH_INIT,

but I'm hoping to see something with actionable data
{time} user {ip} {protocol} {digest} {cipher} {kex} {client}
{time} user 10.10.10.10 ssh_v1 hmac-ripemd160 3des-cbc
diffie-hellman-group1-sha1 "OpenSSH_1"

Can this data be logged?
Or am I out of luck?

Thanks
Chris

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.