RELEASE #release #tls Release 1.3.0

Removed default TLS version 1.0, 1.1 and added 1.3.
Removed deprecated TLS option NoCertRequest.

Author: bloodhunterd

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes will be documented in this file.
 
+<a name="v1-3-0"></a>
+## [1.3.0](https://github.com/bloodhunterd/froxlor-ftp/releases/tag/1.3.0) &#9839; 01.11.2022
+
+* Removed default TLS version **1.0**, **1.1** and added **1.3**
+* Removed deprecated TLS option **NoCertRequest**
+
 <a name="v1-2-0"></a>
 ## [1.2.0](https://github.com/bloodhunterd/froxlor-ftp/releases/tag/1.2.0) &#9839; 12.12.2021
 

Dockerfile

@@ -5,31 +5,31 @@ FROM debian:stable-slim
 # ===================================================
 
 # Froxlor
-ENV FRX_WEB_DIR='/var/customers/webs'
-ENV FRX_DB_HOST='localhost'
-ENV FRX_DB_NAME='froxlor'
-ENV FRX_DB_USER='froxlor'
-ENV FRX_DB_PASSWORD=''
+ENV FRX_WEB_DIR="/var/customers/webs"
+ENV FRX_DB_HOST="localhost"
+ENV FRX_DB_NAME="froxlor"
+ENV FRX_DB_USER="froxlor"
+ENV FRX_DB_PASSWORD=""
 
 # ProFTPd
-ENV SERVER_NAME='Froxlor FTP'
+ENV SERVER_NAME="Froxlor FTP"
 
 # Time
-ENV TZ='Europe/Berlin'
+ENV TZ="Europe/Berlin"
 
 # SFTP
 ENV SFTP_PORT=21
-ENV SFTP_ENGINE='on'
+ENV SFTP_ENGINE="on"
 
 # TLS
 ENV TLS_CERT_BITS=2048
-ENV TLS_CERT_COMMON_NAME=''
-ENV TLS_CERT_COUNTRY=''
+ENV TLS_CERT_COMMON_NAME="localhost"
+ENV TLS_CERT_COUNTRY=""
 ENV TLS_CERT_DAYS=3652
-ENV TLS_CERT_ORGANIZATION=''
-ENV TLS_CERT_STATE=''
-ENV TLS_ENGINE='off'
-ENV TLS_PROTOCOLS='TLSv1 TLSv1.1 TLSv1.2'
+ENV TLS_CERT_ORGANIZATION=""
+ENV TLS_CERT_STATE=""
+ENV TLS_ENGINE="off"
+ENV TLS_PROTOCOLS="TLSv1.2 TLSv1.3"
 
 # ===================================================
 # Ports

README.md

@@ -16,13 +16,13 @@ Docker image of ProFTPD for Froxlor Server Management Panel.
 ### Docker Compose
 
 ~~~dockerfile
-version: '2.4'
+version: "2.4"
 
 services:
   ftp:
     image: bloodhunterd/froxlor-ftp
     ports:
-      - '21:21'
+      - "21:21"
     volumes:
       - ./webs/:/var/customers/webs/
 ~~~
@@ -31,52 +31,52 @@ services:
 
 #### Common
 
-| ENV | Default | Description
-| --- | ------- | -----------
-| SERVER_NAME | Froxlor FTP | Public server name.
-| TZ | Europe/Berlin | [PHP: List of supported timezones - Manual](https://www.php.net/manual/en/timezones.php).
+| ENV         | Default       | Description                                                                               |
+|-------------|---------------|-------------------------------------------------------------------------------------------|
+| SERVER_NAME | Froxlor FTP   | Public server name.                                                                       |
+| TZ          | Europe/Berlin | [PHP: List of supported timezones - Manual](https://www.php.net/manual/en/timezones.php). |
 
 #### Froxlor
 
-| ENV | Default | Description
-| --- | ------- | -----------
-| FRX_WEB_DIR | /var/customers/webs | Path to the Froxlor customer web.
-| FRX_DB_HOST | localhost | Froxlor database hostname or IP.
-| FRX_DB_NAME | froxlor | Froxlor database name.
-| FRX_DB_USER | froxlor | Froxlor database user.
-| FRX_DB_PASSWORD |  | Froxlor database user password.
+| ENV             | Default             | Description                       |
+|-----------------|---------------------|-----------------------------------|
+| FRX_WEB_DIR     | /var/customers/webs | Path to the Froxlor customer web. |
+| FRX_DB_HOST     | localhost           | Froxlor database hostname or IP.  |
+| FRX_DB_NAME     | froxlor             | Froxlor database name.            |
+| FRX_DB_USER     | froxlor             | Froxlor database user.            |
+| FRX_DB_PASSWORD |                     | Froxlor database user password.   |
 
 #### SFTP
 
-| ENV | Default | Description         
-| --- | :-----: |---------------------
-| SFTP_ENGINE | on | Enable/disable SFTP service. Valid values are **on** or **off**.
-| SFTP_PORT | 21 | Port of the SFTP service.
+| ENV         | Default | Description                                                      |
+|-------------|:-------:|------------------------------------------------------------------|
+| SFTP_ENGINE |   on    | Enable/disable SFTP service. Valid values are **on** or **off**. |
+| SFTP_PORT   |   21    | Port of the SFTP service.                                        |
 
 #### FTPS
 
-| ENV | Default | Description
-| --- | :-----: | -----------
-| TLS_CERT_BITS | 2048 | Certificate strength in bits.
-| TLS_CERT_COMMON_NAME |  | Certificate domain.
-| TLS_CERT_COUNTRY |  | Country of the certificate issuer.
-| TLS_CERT_DAYS | 3652 | Time in days the certificate is valid.
-| TLS_CERT_ORGANIZATION |  | Organization of the certificate issuer.
-| TLS_CERT_STATE |  | State of the certificate issuer.
-| TLS_ENGINE | off | Enable/disable FTPS service. Valid values are **on** or **off**.
-| TLS_PROTOCOLS | TLSv1 TLSv1.1 TLSv1.2 | Space separated TLS protocol versions.
+| ENV                   |     Default     | Description                                                      |
+|-----------------------|:---------------:|------------------------------------------------------------------|
+| TLS_CERT_BITS         |      2048       | Certificate strength in bits.                                    |
+| TLS_CERT_COMMON_NAME  |    localhost    | Certificate domain.                                              |
+| TLS_CERT_COUNTRY      |                 | Country of the certificate issuer.                               |
+| TLS_CERT_DAYS         |      3652       | Time in days the certificate is valid.                           |
+| TLS_CERT_ORGANIZATION |                 | Organization of the certificate issuer.                          |
+| TLS_CERT_STATE        |                 | State of the certificate issuer.                                 |
+| TLS_ENGINE            |       off       | Enable/disable FTPS service. Valid values are **on** or **off**. |
+| TLS_PROTOCOLS         | TLSv1.2 TLSv1.3 | Space separated TLS protocol versions.                           |
 
 ### Ports
 
-| Port | Description
-| ---: | -----------
-| 21   | Port for FTP, FTPS and/or SFTP.
+| Port | Description                     |
+|-----:|---------------------------------|
+|   21 | Port for FTP, FTPS and/or SFTP. |
 
 ### Volumes
 
-| Volume | Path | Read only | Description
-| ------ | ---- |:---------:| -----------
-| Froxlor customers | /var/customers/webs/ | ✖  | Froxlor customer web directory.
+| Volume            | Path                 | Read only | Description                     |
+|-------------------|----------------------|:---------:|---------------------------------|
+| Froxlor customers | /var/customers/webs/ | ✖  | Froxlor customer web directory. |
 
 ## Update
 

src/etc/proftpd/tls.conf

@@ -6,7 +6,7 @@ TLSRSACertificateFile                   /etc/ssl/certs/proftpd.crt
 TLSRSACertificateKeyFile                /etc/ssl/private/proftpd.key
 TLSECCertificateFile                    /etc/ssl/certs/proftpd_ec.crt
 TLSECCertificateKeyFile                 /etc/ssl/private/proftpd_ec.key
-TLSOptions                              NoCertRequest NoSessionReuseRequired
+TLSOptions                              NoSessionReuseRequired
 TLSVerifyClient                         off
 
 # Are clients required to use FTP over TLS when talking to this server?