Re: [Proftpd-user] Sftpcipher directive

--===============2203839682786594854==
Content-Type: multipart/alternative; boundary="00000000000027474c061ebe5abe"

--00000000000027474c061ebe5abe
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

to "visualize" the enabled ciphers for your server, install nmap, and from
a command line, you can run

## check for ssh/sftp algos
nmap -Pn --script ssh2-enum-algos -p 22 SFTP.HOST.WHATEVER

## check for ssl/tls ciphers
nmap --script ssl-enum-ciphers -p 443 WWW.HOST.WHATEVER

if your machine is running openssl v3+, you'll get an accurate map of the
enable key exchange and encryption algorithms.

.. pretty sure ssh will show accurate, even for openssl v1, but modern tls
ciphers will only show if you have openssl v3+


On Fri, Aug 2, 2024 at 1:36=E2=80=AFPM TJ Saunders <[email protected]> wrote=
:

> > TJ, thanks.  Quick question.  I=E2=80=99m a bit confused.  As I referen=
ced ssh
> > you mentioned  openssl. Does ssh use OpenSSL? I would expect openssh.
>
> The mod_sftp module for ProFTPD implements the SSH and SFTP protocols
> using the OpenSSL library for the necessary cryptographic support.  It do=
es
> not use the OpenSSH implementations in any way.  In fact, mod_sftp
> implements some parts of the SFTP protocol that OpenSSH does not implemen=
t.
>
> Cheers,
> TJ
>
>
> _______________________________________________
> ProFTPD Users List   <[email protected]>
> Unsubscribe problems?
> http://www.proftpd.org/list-unsub.html

--00000000000027474c061ebe5abe
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>to &quot;visualize&quot; the enabled ciphers for=
 your server, install nmap, and from a command line, you can run</div><div =
style=3D"margin-left:40px"><span style=3D"font-family:monospace"><br>## che=
ck for ssh/sftp algos<br></span></div><div style=3D"margin-left:40px"><span=
 style=3D"font-family:monospace">nmap -Pn --script ssh2-enum-algos -p 22 SF=
TP.HOST.WHATEVER<br><br></span></div><div style=3D"margin-left:40px"><span =
style=3D"font-family:monospace">## check for ssl/tls ciphers<br></span></di=
v><div style=3D"margin-left:40px"><span style=3D"font-family:monospace">nma=
p --script ssl-enum-ciphers -p 443 WWW.HOST.WHATEVER<br></span></div><span =
style=3D"font-family:monospace"><br></span></div><div><span style=3D"font-f=
amily:arial,sans-serif">if your machine is running openssl v3+, you&#39;ll =
get an accurate map of the enable key exchange and encryption algorithms.</=
span></div><br><div>.. pretty sure ssh will show accurate, even for openssl=
 v1, but modern tls ciphers will only show if you have openssl v3+<br></div=
><div><br><span style=3D"font-family:arial,sans-serif"></span></div></div><=
br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri,=
 Aug 2, 2024 at 1:36=E2=80=AFPM TJ Saunders &lt;<a href=3D"mailto:tj@castag=
lia.org">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmai=
l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);padding-left:1ex">&gt; TJ, thanks.=C2=A0 Quick question.=C2=A0 I=E2=
=80=99m a bit confused.=C2=A0 As I referenced ssh <br>
&gt; you mentioned=C2=A0 openssl. Does ssh use OpenSSL? I would expect open=
ssh. <br>
<br>
The mod_sftp module for ProFTPD implements the SSH and SFTP protocols using=
 the OpenSSL library for the necessary cryptographic support.=C2=A0 It does=
 not use the OpenSSH implementations in any way.=C2=A0 In fact, mod_sftp im=
plements some parts of the SFTP protocol that OpenSSH does not implement.<b=
r>
<br>
Cheers,<br>
TJ<br>
<br>
<br>
_______________________________________________<br>
ProFTPD Users List=C2=A0 =C2=A0&lt;<a href=3D"mailto:proftpd-users@proftpd.=
org" target=3D"_blank">[email protected]</a>&gt;<br>
Unsubscribe problems?<br>
<a href=3D"http://www.proftpd.org/list-unsub.html" rel=3D"noreferrer" targe=
t=3D"_blank">http://www.proftpd.org/list-unsub.html</a></blockquote></div>

--00000000000027474c061ebe5abe--


--===============2203839682786594854==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2203839682786594854==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
--===============2203839682786594854==--