|
 |
d7fdbd |
From 75c942c77aa575143c5b75637e64a925ad12641a Mon Sep 17 00:00:00 2001
|
|
|
d7fdbd |
From: =?UTF-8?q?Ond=C5=99ej=20Lyson=C4=9Bk?= <olysonek@redhat.com>
|
|
|
d7fdbd |
Date: Thu, 21 Dec 2017 16:38:40 +0100
|
|
|
d7fdbd |
Subject: [PATCH 43/59] Enable only TLSv1.2 by default
|
|
|
d7fdbd |
|
|
|
d7fdbd |
Disable TLSv1 and TLSv1.1 - enable only TLSv1.2 by default.
|
|
|
d7fdbd |
---
|
|
|
d7fdbd |
tunables.c | 6 +++---
|
|
|
d7fdbd |
vsftpd.conf.5 | 4 ++--
|
|
|
d7fdbd |
2 files changed, 5 insertions(+), 5 deletions(-)
|
|
|
d7fdbd |
|
|
|
d7fdbd |
diff --git a/tunables.c b/tunables.c
|
|
|
d7fdbd |
index 354251c..9680528 100644
|
|
|
d7fdbd |
--- a/tunables.c
|
|
|
d7fdbd |
+++ b/tunables.c
|
|
|
d7fdbd |
@@ -211,9 +211,9 @@ tunables_load_defaults()
|
|
|
d7fdbd |
tunable_force_local_data_ssl = 1;
|
|
|
d7fdbd |
tunable_sslv2 = 0;
|
|
|
d7fdbd |
tunable_sslv3 = 0;
|
|
|
d7fdbd |
- /* TLSv1 up to TLSv1.2 is enabled by default */
|
|
|
d7fdbd |
- tunable_tlsv1 = 1;
|
|
|
d7fdbd |
- tunable_tlsv1_1 = 1;
|
|
|
d7fdbd |
+ tunable_tlsv1 = 0;
|
|
|
d7fdbd |
+ tunable_tlsv1_1 = 0;
|
|
|
d7fdbd |
+ /* Only TLSv1.2 is enabled by default */
|
|
|
d7fdbd |
tunable_tlsv1_2 = 1;
|
|
|
d7fdbd |
tunable_tilde_user_enable = 0;
|
|
|
d7fdbd |
tunable_force_anon_logins_ssl = 0;
|
|
|
d7fdbd |
diff --git a/vsftpd.conf.5 b/vsftpd.conf.5
|
|
|
d7fdbd |
index 2a7662e..df14027 100644
|
|
|
d7fdbd |
--- a/vsftpd.conf.5
|
|
|
d7fdbd |
+++ b/vsftpd.conf.5
|
|
|
d7fdbd |
@@ -539,7 +539,7 @@ Only applies if
|
|
|
d7fdbd |
is activated. If enabled, this option will permit TLS v1 protocol connections.
|
|
|
d7fdbd |
TLS v1.2 connections are preferred.
|
|
|
d7fdbd |
|
|
|
d7fdbd |
-Default: YES
|
|
|
d7fdbd |
+Default: NO
|
|
|
d7fdbd |
.TP
|
|
|
d7fdbd |
.B ssl_tlsv1_1
|
|
|
d7fdbd |
Only applies if
|
|
|
d7fdbd |
@@ -547,7 +547,7 @@ Only applies if
|
|
|
d7fdbd |
is activated. If enabled, this option will permit TLS v1.1 protocol connections.
|
|
|
d7fdbd |
TLS v1.2 connections are preferred.
|
|
|
d7fdbd |
|
|
|
d7fdbd |
-Default: YES
|
|
|
d7fdbd |
+Default: NO
|
|
|
d7fdbd |
.TP
|
|
|
d7fdbd |
.B ssl_tlsv1_2
|
|
|
d7fdbd |
Only applies if
|
|
|
d7fdbd |
--
|
|
|
d7fdbd |
2.14.4
|
|
|
d7fdbd |
|