3 # Enable TLS/SSL connections
7 TLSLog /var/log/proftpd/tls.log
9 # Path to CA chain file
10 #TLSCACertificateFile /etc/ftpd/CA.crt
12 # Path to certificate file
13 TLSRSACertificateFile /etc/ftpd/server.crt
15 # Path to certificate key file
16 TLSRSACertificateKeyFile /etc/ftpd/server.key
18 # Define available TLS/SSL ciphers (allow only strong ones by default)
19 TLSCipherSuite HIGH:!kDHd:!aNULL:!aDSS:!eNULL:!DES:!RC4:!RC2:!MD5:!SHA1:!SHA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1:!EXP:!EXPORT56:!LOW:!MEDIUM:!ADH:!DSS:!NULL
24 # Don't verify client certificates
27 # Require TLS/SSL for all connections and both control and data channels
30 # Do not require reuse of the SSL session
31 # This is required by some apps (ie. curl) to work over SSL
32 TLSOptions NoSessionReuseRequired