Softaculous


Topic : FTP underTLS issues


Posted By: peopleinside on January 25, 2017, 1:43 pm
Server under TLS FTP loose connection and error showed by WinSCP is:

Code
Using TLSv1.2, cipher TLSv1/SSLv3: ECDHE-RSA-AES128-GCM-SHA256, 2048 bit RSA, ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH    Au=RSA  Enc=AESGCM(128) Mac=AEAD

Disconnessione dal server
Copia file lato remoto fallita.


Seems pure ftp is trying to use SSLv3?

FTP under TLS give so many disconnections to me.


-----------------------
PeopleInside  :angel:
Passionate Webuzo User

Posted By: webuzo_manager on January 28, 2017, 8:14 am | Post: 1
Hi peopleinside,

It seems that pure-ftpd is using TLS 1.2v from your machine , but also accepts connections via SSLv3.

I suggest that you change your pure-ftpd conf located at
/usr/local/apps/pureftpd/etc/

Change the following line in the config file :

TLSCipherSuite          HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3

to

TLSCipherSuite          HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3

The above setting will force Pure - FTPD to only use TLS cipher suite for connection and not accept connection from SSLv3 cipher suite.

Hope this helps

Edited by webuzo_manager : January 28, 2017, 8:15 am

Posted By: peopleinside on January 28, 2017, 9:18 am | Post: 2
I have already disabled SSLv3 on pure-ftp.
Now I will try the new pure-ftp update made some day ago.


-----------------------
PeopleInside  :angel:
Passionate Webuzo User

Powered By AEF 1.0.8 © 2007-2008 Electron Inc.