On Wed, Dec 8, 2010 at 9:50 AM, Aidan Diffey <[email protected]> wrote: > Ok. What does the require_ssl_reuse setting do anyhow?
Från the vsftp documentation: equire_ssl_reuse If set to yes, all SSL data connections are required to exhibit SSL session reuse (which proves that they know the same master secret as the control channel). Although this is a secure default, it may break many FTP clients, so you may want to disable it. For a discussion of the consequences, see http://scarybeastsecurity.blogspot.com/2009/02/vsftpd-210-released.html (Added in v2.1.0). Default: YES /niklas
