Is there an ability to configure what Cipher Suite the SSL w

Please post here if you have problems in using Wing FTP Server.
Post Reply
IT-Dude
Posts: 1
Joined: Sat Sep 19, 2015 1:00 am

Is there an ability to configure what Cipher Suite the SSL w

Post by IT-Dude »

I'm quite familiar with setting up SSL certificates for secure Apache websites... normally nothing more than adding some additional lines in the httpd.conf file.

However, I can't figure out how I can apply similar settings to the WingFTP setup.

On a fresh install with a commercial certificate installed, WingFTP cannot get anything better than a 'B' rating on Qualsys SSL site because it continues to support the RC4 cipher which is being deprecated. (I mean seriously.... 56-bit encryption?!?!)

I'm hoping that I can simply add/subtract a few items in the SSL configuration that can change the default settings so that I can boost the site's security to an 'A' rating.

Is this accessible using the LUA API. Anyone have any insight?

BTW: Running a CentOS 6.7 server. WingFTP 4.5.3
FTP
Site Admin
Posts: 2072
Joined: Tue Sep 29, 2009 6:09 am

Re: Is there an ability to configure what Cipher Suite the S

Post by FTP »

OK, you just need to enable the option "Server > Settings > General Settings > Miscellaneous > Enable FIPS 140-2 Mode", then Wing FTP Server will use the algorithms which be approved by the FIPS group (only allows strong SSL ciphers).
Post Reply