add tls config

2016-10-14 06:27:38 +02:00 · 2016-10-14 06:27:38 +02:00 · 406b247a66
commit 406b247a66
parent 78d4f972d1
1 changed files with 17 additions and 0 deletions
--- a/rootfs/etc/confd/templates/proftpd.conf.tmpl
+++ b/rootfs/etc/confd/templates/proftpd.conf.tmpl
@ -18,6 +18,23 @@ PassivePorts {{getenv "PASSIVE_LOWER_BOUND"}} {{getenv "PASSIVE_UPPER_BOUND"}}
  DenyAll
 </Limit>

+<IfModule mod_tls.c>
+    TLSEngine on
+    TLSProtocol TLSv1.2
+    TLSRequired on
+
+    TLSRSACertificateFile /etc/ssl/proftp/fullchain.pem
+    TLSRSACertificateKeyFile /etc/ssl/proftp/provkey.pem
+
+    # CA the server trusts
+    TLSCACertificateFile /etc/ftpd/root.cert.pem
+
+    TLSVerifyClient off
+    TLSServerCipherPreference on
+    TLSSessionCache internal: 1800
+    TLSCipherSuite AES128+EECDH:AES128+EDH
+</IfModule>
+
 <IfModule mod_ldap.c>
    AuthOrder mod_ldap.c