[Proftpd-user] Log ciphers & algos
Chris Young <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <CABr7rqPxdPkp0_pDnbUK9PXx9KfYT9MNEnZhB0nPzJphVZvRsQ@mail.gmail.com> |
I'd like to prune my allowed digests/ciphers/key-exchanges
I know I have some older, less recommended settings enabled
I could just warn my users and make the change on a scheduled date
But with 1500 regularly active sftp logins tied to "critical processes", I
would prefer to target logins known to be using specific settings that we
plan to deprecate.
Using ExtendedLog, I'm logging SEC and AUTH, and I can see the KEX_INIT and
ECDH_INIT,
but I'm hoping to see something with actionable data
{time} user {ip} {protocol} {digest} {cipher} {kex} {client}
{time} user 10.10.10.10 ssh_v1 hmac-ripemd160 3des-cbc
diffie-hellman-group1-sha1 "OpenSSH_1"
Can this data be logged?
Or am I out of luck?
Thanks
Chris
_______________________________________________
ProFTPD Users List <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html