Opened 6 years ago

Closed 2 years ago

#11699 closed Patch (outdated)

Need to disable TLs 1.0 support on FTPS Server

Reported by: Jignesh Patel Owned by:
Priority: high Component: FileZilla Server
Keywords: TLs 1.0 Cc: jigneshp.hipl@…
Component version: 0.9.60 beta Operating system type: Windows
Operating system version: 6.3(Build 9600) with all Windows updates

Description

Hello Filezilla Team,

I am using Filezilla Server with FTPS.

I was working on our one of the servers to disable TLs 1.0 and fix other security issues.

1) I found that Filezilla FTP server(FTPS 990) supports TLs 1.0 even though I disabled on windows server 2012 R2.

2) I disabled "Secure Client-Initiated Renegotiation" on my server, but while connecting FTPS (port 990) it is supporting "Secure Client-Initiated Renegotiation".

Is there any way to disabled TLs 1.0 support and "Secure Client-Initiated Renegotiation " in Filezilla server by means of configuration. Or can you provide a hotfix for the same in software for configuration?

Thank you in advance.

--
Regards,

Jignesh Patel

Attachments (2)

Filezilla Server - FTPS TLs 1.0.png (67.7 KB ) - added by Jignesh Patel 6 years ago.
Filezilla Server - Secure Client-Initiated Renegotiation.png (104.7 KB ) - added by Jignesh Patel 6 years ago.

Download all attachments as: .zip

Change History (3)

by Jignesh Patel, 6 years ago

comment:1 by Fabio Alemagna, 2 years ago

Resolution: outdated
Status: newclosed
Note: See TracTickets for help on using tickets.