10 ms·
This is why you have never seen FTPS in the wild, from the vsftpd.conf manual page: ssl_enable If enabled, and vsftpd was compiled against OpenSSL, vsf
by chasil 5y ago
This is why you have never seen FTPS in the wild, from the vsftpd.conf manual page:
ssl_enable
If enabled, and vsftpd was compiled against OpenSSL, vsftpd will
support secure connections via SSL. This applies to the control
connection (including login) and also data connections. You'll
need a client with SSL support too. NOTE!! Beware enabling this
option. Only enable it if you need it. vsftpd can make no guar‐
antees about the security of the OpenSSL libraries. By enabling
this option, you are declaring that you trust the security of
your installed OpenSSL library.
Default: NO
https://scarybeastsecurity.blogspot.com/2015/07/vsftpd-303-released-and-horrors-of-ftp.html https://scarybeastsecurity.blogspot.com/2015/07/vsftpd-303-r...
- hobs 5y agoAh, but IIS uses it so it probably is still floating around somewhere.
- Lex-2008 5y agoPostfix has a similar note: > NOTE: By turning on TLS support in Postfix, you not only get the ability to encrypt mail and to authenticate remote SMTP clients or servers. You also turn on hundreds of thousands of lines of OpenSSL library code. Assuming that OpenSSL is written as carefully as Wietse's own code, every 1000 lines introduce one additional bug into Postfix. http://www.postfix.org/TLS_README.html http://www.postfix.org/TLS_README.html