View Attach (1) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
jpg
 ssl_prefs1.jpg 553.1 kB 1 05-Dec-2023 05:32 Ada Csaba

This page (revision-20) was last changed on 14-Oct-2024 07:12 by Ada Csaba

This page was created on 05-Dec-2023 05:32 by Ada Csaba

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 changed one line
On this page can issue an SSL cert and tweak SSL ciphers.
On this page can __[issue an SSL cert|SSLCerts]__ and tweak SSL cipher suite settings or individual ciphers.
\\
[{Image src='ssl_prefs1.jpg' width='1360' height='..' align='left' style='..' class='..' }]\\
\\
In the upper half of the page can issue a new cert by doing all 3 __Steps__ or apply an existing keystore, as per our [SSL Cert|SSLCerts] wiki.\\
\\
The __Advanced__ section allows changing supported SSL cipher groups or enable/disable individual ciphers.\\
\\
__TLS versions__ field defines the supported cipher groups for all SSL __server__ ports: HTTPS, WEBDAVS, FTPS, FTPES.\\
\\
__TLS versions client__ field defines the supported cipher groups for all __client__ mode: CrushTask task items, remote user VFS of HTTPS, WEBDAVS, FTPS, FTPES type, the AS2 protocol, SMTP relay connector.\\
\\
CrushFTP v10 supports SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3, while TLSv1.3 ciphers require Java 17+.\\
\\
__REMINDER:__ TLS session resumption for Implicit FTPS is only supported by TLSv1.3, when using this protocol either in client or server mode, need to tweak the cipher groups accordingly.\\
\\
__Require valid client certificate__ , usually never needs to be turned on, enforces client [client cert|client certificate] authentication for all SSL ports. Rather recommanded to use the appropriate settings on specific server listener items instead.\\
\\
The __All insecure ciphers__ link will move all non-A rated ciphers into the __Disabled ciphers__ list, we update the strength policy by CrushFTP updates as new ciphers come in existence or vulnerabilities are discovered in existing ones.\\
At line 3 removed 2 lines
[{Image src='ssl_prefs1.jpg' width='1200' height='..' align='left' style='..' class='..' }]
Version Date Modified Size Author Changes ... Change note
20 14-Oct-2024 07:12 1.626 kB Ada Csaba to previous
19 14-Oct-2024 07:12 1.586 kB Ada Csaba to previous | to last
18 14-Oct-2024 07:11 1.586 kB Ada Csaba to previous | to last
17 18-Apr-2024 12:48 1.575 kB Ada Csaba to previous | to last
16 05-Dec-2023 05:32 1.566 kB Ada Csaba to previous | to last
15 05-Dec-2023 05:32 1.469 kB Ada Csaba to previous | to last
14 05-Dec-2023 05:32 1.457 kB Ada Csaba to previous | to last
13 05-Dec-2023 05:32 1.461 kB Ada Csaba to previous | to last
12 05-Dec-2023 05:32 1.457 kB Ada Csaba to previous | to last
11 05-Dec-2023 05:32 0.904 kB Ada Csaba to previous | to last
10 05-Dec-2023 05:32 0.738 kB Ada Csaba to previous | to last
9 05-Dec-2023 05:32 0.301 kB Ada Csaba to previous | to last
8 05-Dec-2023 05:32 0.309 kB Ada Csaba to previous | to last
7 05-Dec-2023 05:32 0.305 kB Ada Csaba to previous | to last
6 05-Dec-2023 05:32 0.156 kB Ada Csaba to previous | to last
5 05-Dec-2023 05:32 0.156 kB Ada Csaba to previous | to last
4 05-Dec-2023 05:32 0.156 kB Ada Csaba to previous | to last
3 05-Dec-2023 05:32 0.156 kB Ada Csaba to previous | to last
2 05-Dec-2023 05:32 0.154 kB Ada Csaba to previous | to last
1 05-Dec-2023 05:32 0.059 kB Ada Csaba to last
« This page (revision-20) was last changed on 14-Oct-2024 07:12 by Ada Csaba
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
Certifications and compliancy
FAQ
LeftMenu

JSPWiki