- allow TLS 1.3

[packages/proftpd.git] / proftpd-mod_tls.conf

diff --git a/proftpd-mod_tls.conf b/proftpd-mod_tls.conf
index 8fdcd1596f8b7cfce5af84638e08a32b234d7d48..07f9a635dfe4ae5ca9a0c772b10acbc36a9d8776 100644 (file)
--- a/proftpd-mod_tls.conf
+++ b/proftpd-mod_tls.conf
@@ -18,8 +18,8 @@ TLSRSACertificateKeyFile /etc/proftpd/server.key
 # Define available TLS/SSL ciphers (allow only strong ones by default)
 TLSCipherSuite HIGH:!kDHd:!aNULL:!aDSS:!eNULL:!DES:!RC4:!RC2:!MD5:!SHA1:!SHA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1:!EXP:!EXPORT56:!LOW:!MEDIUM:!ADH:!DSS:!NULL
 
-# Allow TLSv1.2 only
-TLSProtocol TLSv1.2
+# Allow TLSv1.2 and TLSv1.3
+TLSProtocol TLSv1.2 TLSv1.3
 
 # Don't verify client certificates
 TLSVerifyClient off