Sample Header Ad - 728x90

How to disable SSLv2 and SSLv3 in pure-ftpd

2 votes
2 answers
8950 views
I am running pure-ftpd like this: /usr/sbin/pure-ftpd -A -c10 -B -C3 -z -D -e -fftp -H -I15 -lpam -L2000:8 -m4 -p30000:30100 -s -u40 -x -r -i -k99 -G -Z -Y1 -J'HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3' but in syslog-ng monitoring I get an error: pure-ftpd: (?@?) [ERROR] SSL/TLS: Invalid TLSCipherSuite specified 'HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3' I tried several variations without any luck. The only one that worked without a problem it was this one (in the configuration file): TLSCipherSuite HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 then run: /usr/sbin/pure-config.pl /etc/pure-ftpd/pure-ftpd.conf Running: /usr/sbin/pure-ftpd -A -c10 -B -C3 -d -z -D -e -fftp -H -I15 -lpam -L2000:8 -m4 -p30000:30100 -s -u40 -x -r -i -k99 -G -Z -Y1 -JHIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 but with this one, only SSLv2 is disabled. I found this command at: http://download.pureftpd.org/pub/pure-ftpd/doc/README and there is says: > '-J ': Sets the list of ciphers that will be accepted for SSL/TLS connections. > For example: -J HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 > Prefixing the list with -S: totally disables SSLv3. I think this -S might solve my problem but I can't figure out how to use it.
Asked by drpaneas (2420 rep)
Nov 19, 2014, 10:04 AM
Last activity: Oct 2, 2016, 02:41 PM