Some minor fixes

MarcinKabiesz · Dec 27th 2015

Hello,
I wanted to suggest some minor fixes for version 1.3.0 or later.

NGINX:
File: /etc/sites-available/00_master_ssl.conf

Old:
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";

New:
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES or HIGH:!aNULL:!SHA";

SHA is deprecated. SHA-256 is recommended.

PROFTPD:
File: /etc/proftpd/proftpd.conf

Old:
#PassivePorts 49152 65534

New:
PassivePorts 49152 65534

or else, because my firewall uses a default drop policy.

Thanks
Marcin

mafioso · Dec 27th 2015

Please create tickets in our ticketing system..

**Nuxwin** · Dec 27th 2015

Deprecated don't means that SHA-1 is no longer used. We must wait a bit to enforce it.
Enabling/disabing passive mode is up to you. I'll see if we can enable by default without add side effects for those which are behing nat.

MarcinKabiesz · Jan 3rd 2016

Hello,
thanks for the information.

Marcin

Share