Hello,

I'm not sure how much work has been done with this on the project with this 
lately, but what needs to be added is an option that allows the 'enabled ssl 
protocols' to be set on the mina SSLFilter in a few spots.  Basically, every 
place in the code that calls sslFilter.setEnabledCipherSuites(..) should 
also/instead call sslFilter.setEnabledProtocols(..).  If such is done, you can 
granularly control which SSL/TLS protocols are enabled on the server. And this 
works well for the Oracle and IBM jvms.

Regards,
Erick 

-----Original Message-----
From: juergen sorg [mailto:j.s...@fz-juelich.de] 
Sent: Wednesday, January 21, 2015 12:58 AM
To: ftpserver-users@mina.apache.org
Subject: disable sslv3

hi,

is it possible to disable some SSL and TLS versions in apache mina ftp 
server?
i read the documentation, but there is only the option to choose between 
SSL or TLS. and if i specifiy TLS in the configuration (spring confign 
file) then the same protocols are enabled as i use SSL (i could connect 
by using openssl client with SSLv3, TLSv1 TLSv1.1 TLSv1.2

thanks in advance

gruss juergen

Reply via email to