[Proftpd-user] how to restrict server to only using tls 1.2

byron <[email protected]>
Newsgroups gmane.network.proftpd.user
Message-ID <CAJ+YQypp9KhNytUAmu67M0CGFbP2Ve65K-Ug_fy3P_k6b7jXDg@mail.gmail.com>
I'm running version 1.3.6 of proftpd on debian buster.  It is the version
from the debian repository.

I'm having problems with some clients connecting and to troubleshoot I
wanted to restrict the version of tls being used to only 1.2.

So before making any changes to the proftpd config, when I would connect
using filezilla (which works fine) and click on the padlock in the bottom
right it would show under session details that I am using protocol TLS1.3.

So then I thought if I would to put the following entry in my tls.conf file

TLSProtocol TLSv1.2

and restart the server that when I connected with filezilla I would see
TLS1.2 under the session details.  But I don't, I still get TLS1.3.

And the strange thing is, eventually I commented out the TLSProtocol line
all together and connected with filezilla and it still reported TLS1.3.

Any help appreciated.

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.