Public bug reported:

proftpd 1.3.5e-1build1
on 18.04.4 LTS (Bionic Beaver)

I have problems using TLSv1.3 connections.

Even with the configuration:
TLSProtocol TLSv1.1 TLSv1.2

the logs show TLSv1.3 connections, which should not be allowed:

mod_tls/2.6[10213]: TLS/TLS-C requested, starting TLS handshake
mod_tls/2.6[10213]: client supports secure renegotiations
mod_tls/2.6[10213]: TLSv1.3 connection accepted, using cipher
TLS_AES_256_GCM_SHA384 (256 bits)
mod_tls/2.6[10213]: Protection set to Private

The following negative directive is not known ans leads to startup errors:
TLSProtocol TLSv1.1 TLSv1.2 -TLSv1.3

Already discussed here: http://bugs.proftpd.org/show_bug.cgi?id=4389

Needs patch for ubuntu!

** Affects: proftpd-dfsg (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1865461

Title:
  TLSProtocol is ignored -> TLSv1.3 is implicit accepted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/1865461/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to