Disable SSLv2

Please post here if you have problems in using Wing FTP Server.

Disable SSLv2

Postby baptiste » Wed Jul 07, 2010 12:37 pm

Hi,
Is it possible to disable SSLv2 for encrypted ftps connections ?

Regards
baptiste
 
posts 6
 
joined Thu Jun 17, 2010 2:05 pm

Re: Disable SSLv2

Postby FTP » Wed Jul 07, 2010 5:50 pm

It is impossible, has no such option.
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Disable SSLv2

Postby baptiste » Thu Jul 08, 2010 2:37 pm

SSLv2 protocol is known to have security flaws, it will be nice to have the possibility to set protocols or cyphers that we want to use (or disable) for encrypted connections.
baptiste
 
posts 6
 
joined Thu Jun 17, 2010 2:05 pm

Re: Disable SSLv2

Postby FTP » Thu Jul 08, 2010 4:05 pm

We know it, so we decide to allow SSLv3 only in the next version. SSLv2 like chicken ribs, very few client will use it.
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Disable SSLv2

Postby baptiste » Fri Jul 09, 2010 2:17 pm

Ok,
I have asked this question because we must pass security audit and it's mandatory to avoid SSLv2 on all services on our network to be compliant.

Do you know when the next version of wftpd will be out and this version will be 'compatible' licence bought for current version ?
baptiste
 
posts 6
 
joined Thu Jun 17, 2010 2:05 pm

Re: Disable SSLv2

Postby FTP » Fri Jul 09, 2010 5:34 pm

Finally we decide to add an option "disable SSLv2", then you can make a choice whether to disable it.

And new version 3.6.0 will be released in next week.
FTP
Site Admin
 
posts 1232
 
joined Tue Sep 29, 2009 6:09 am

Re: Disable SSLv2

Postby baptiste » Mon Jul 12, 2010 2:01 pm

OK,
Thanks a lot for your reactivity.
baptiste
 
posts 6
 
joined Thu Jun 17, 2010 2:05 pm


Return to Support

Who is online

Users browsing this forum: Google [Bot] and 2 guests