ProFTPD SSLv3 disable

[Silvester van der Leer]

Hello,

If i follow the kb article on a plesk 11.5 system
http://kb.odin.com/en/123160

And add
TLSProtocol TLSv1 TLSv1.1 TLSv1.2
TLSCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM:!SSLv3

to disable SSLv3 to /etc/proftpd.conf

Proftpd stops working and connections are not available anymore.

Does anybody has a solution for this ?

 

[abdi]

Hello Silvester,
Do you have any info in the logs that can help in the investigations?

 

[Silvester van der Leer]

Feb 18 13:20:58 <snip> proftpd[1491]: Fatal: TLSProtocol: directive not allowed in <Global> context on line 23 of '/etc/proftpd.conf'

 

[abdi]

Feb 18 13:20:58 <snip> proftpd[1491]: Fatal: TLSProtocol: directive not allowed in <Global> context on line 23 of '/etc/proftpd.conf'

Well, the error says it all, it the directive you added is NOT allowed. Just remove it!

 

[Silvester van der Leer]

KB Artible is not fully correct

Solved it like this in the config above :
Include /etc/proftpd.include line

<IfModule mod_tls.c>
TLSProtocol SSLv23
TLSCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
</IfModule>

 

[abdi]

Thank you for sharing that info.
@IgorG take note ...