[Proftpd-user] Can proftpd 1.3.0 do TLS 1.2?

[b***@verizon.com]

Is proftpd1.3.0 about to do TLS 1.2 I do see that the TLS module is installed.

/usr/local/sbin/proftpd -V
Compile-time Settings:
Version: 1.3.0
Platform: SOLARIS2 (SOLARIS2_10)
Built With:
configure --disable-devel --with-includes=/usr/sfw/include:/usr/local/ssl/include --with-libraries=/usr/sfw/lib:/usr/local/ssl/lib --prefix=/usr/local --sysconfdir=/usr/local/etc --mandir=/usr/local/man --with-modules=mod_tls

Files:
Configuration File:
/usr/local/etc/proftpd.conf
Pid File:
/usr/local/var/proftpd.pid
Scoreboard File:
/usr/local/var/proftpd/proftpd.scoreboard

Features:
- Autoshadow support
- Controls support
+ curses support
- Developer support
- DSO support
- IPv6 support
+ Largefile support
+ ncurses support
- POSIX ACL support
+ Shadow file support
+ Sendfile support

Tunable Options:
PR_TUNABLE_BUFFER_SIZE = 1024
PR_TUNABLE_GLOBBING_MAX = 8
PR_TUNABLE_HASH_TABLE_SIZE = 40
PR_TUNABLE_NEW_POOL_SIZE = 512
PR_TUNABLE_RCVBUFSZ = 49152
PR_TUNABLE_SCOREBOARD_BUFFER_SIZE = 80
PR_TUNABLE_SCOREBOARD_SCRUB_TIMER = 30
PR_TUNABLE_SELECT_TIMEOUT = 30
PR_TUNABLE_SNDBUFSZ = 49152

BJ Alexander
IT Cloud Services - Verizon IT
Solaris Engineering
phone: [phone]
mailto: ***@one.verizon.com<mailto:***@one.verizon.com>
pager: bj.alexander+***@one.verizon.com<mailto:bj.alexander+***@one.verizon.com>
ITCS Solaris Engineering group email: ITCS-OCS-UNIX-***@verizon.com<mailto:ITCS-OCS-UNIX-***@verizon.com>

Confidentiality Notice: This e-mail message, including any attachments, contains privileged and confidential information, and is intended solely for the use of the intended recipient(s). Any unauthorized review, use, disclosure, distribution or copying of the same is expressly prohibited. If you are not the intended recipient, please contact the sender by replying to this e-mail and destroy/delete all copies of this message

[TJ Saunders]

Post by b***@verizon.com
Is proftpd1.3.0 about to do TLS 1.2 I do see that the TLS module is installed.

*If* your OpenSSL library version is new enough, *and* if you do *not*
use the TLSProtocol directive in your proftpd.conf, then that old
mod_tls version MIGHT work.

The mod_tls code in that (old) ProFTPD version does not use the newer
OpenSSL APIs for explicitly configuring/using TLSv1.2. It will use the
OpenSSL generic "support all SSL/TLS versions" API by default.

Still, if you can, I'd highly recommend that you upgrade to a newer
ProFTPD version, such as 1.3.5d.

Cheers,
TJ