TLSProtocol is ignored -> TLSv1.3 is implicit accepted
Bug #1865461 reported by
Ralf
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
proftpd-dfsg (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
proftpd 1.3.5e-1build1
on 18.04.4 LTS (Bionic Beaver)
I have problems using TLSv1.3 connections.
Even with the configuration:
TLSProtocol TLSv1.1 TLSv1.2
the logs show TLSv1.3 connections, which should not be allowed:
mod_tls/2.6[10213]: TLS/TLS-C requested, starting TLS handshake
mod_tls/2.6[10213]: client supports secure renegotiations
mod_tls/2.6[10213]: TLSv1.3 connection accepted, using cipher
TLS_AES_
mod_tls/2.6[10213]: Protection set to Private
The following negative directive is not known ans leads to startup errors:
TLSProtocol TLSv1.1 TLSv1.2 -TLSv1.3
Already discussed here: http://
Needs patch for ubuntu!
To post a comment you must log in.