Package: pure-ftpd
Version: 1.0.43-3

Filezilla, lftp, and others clients that try to use TLSv1.3, and dont
have a fallback to TLSv1.2 version, fails in the renegotiation and close
the connection.

https://wiki.openssl.org/index.php/TLS1.3#Renegotiation
[...]
TLSv1.3 does not have renegotiation so calls to SSL_renegotiate() or
SSL_renegotiate_abbreviated() will immediately fail if invoked on a
connection that has negotiated TLSv1.3.
[...]

pure-ftpd issue:
https://github.com/jedisct1/pure-ftpd/issues/94

pure-ftpd patch:
https://github.com/jedisct1/pure-ftpd/commit/4a495c61ce22c893aed5ee57f6ce0b43c3be59ad

I have tested the patch and it works fine.


Josu Arenas.

Reply via email to