Merge pull request #455 from fulax/patch-1

proftpd.conf: Default to modern TLS protocols
2021-10-26 09:17:41 +02:00 · 2021-10-26 09:17:41 +02:00 · a85ccd043b
parent 2e1fbd374d 8965df7640
commit a85ccd043b
1 changed files with 5 additions and 1 deletions
--- a/etc/alternc/templates/proftpd/proftpd.conf
+++ b/etc/alternc/templates/proftpd/proftpd.conf
@ -124,7 +124,11 @@ RLimitChroot off
 <IfModule mod_tls.c>
       TLSEngine on
       TLSLog /var/log/proftpd/tls.log
-       TLSProtocol TLSv1
+       # TLSv1.3 has bugs before ProFTPd 1.3.6d and 1.3.7
+       #TLSProtocol TLSv1.2 TLSv1.3
+       TLSProtocol TLSv1.2
+       # For old clients
+       #TLSProtocol TLSv1 TLSv1.1 TLSv1.2

       # Are clients required to use FTP over TLS when talking to this server?
       TLSRequired off