Perl

Set the FTP TLS Version and Ciphers

Demonstrates the TLS negotiation properties SslProtocol and SslAllowedCiphers, and reads back the negotiated TlsVersion and TlsCipherSuite after connecting.

Background: SslProtocol sets the allowed (or minimum) TLS version — default lets Chilkat negotiate the best available, while a value like TLS 1.2 or higher enforces a floor for policy compliance. SslAllowedCiphers narrows the offered cipher suites, which most applications should leave at the secure defaults. The read-only TlsVersion and TlsCipherSuite report what was actually agreed, useful for logging and audits.

Chilkat Perl Downloads

Download Chilkat for Perl

Perl

use chilkat();

$success = 0;

$ftp = chilkat::CkFtp2->new();

$ftp->put_Hostname("ftp.example.com");
$ftp->put_Username("myFtpLogin");

$ftp->put_AuthTls(1);

#  Normally you would not hard-code the password in source.  You should instead obtain it
#  from an interactive prompt, environment variable, or a secrets vault.
$ftp->put_Password("myPassword");

#  Require at least TLS 1.2.  Accepted values include "default", "TLS 1.3", "TLS 1.2",
#  "TLS 1.2 or higher", and so on.  "default" lets Chilkat negotiate the best available.
$ftp->put_SslProtocol("TLS 1.2 or higher");

#  Optionally restrict the cipher suites offered.  Leave empty to use Chilkat's secure defaults.
$ftp->put_SslAllowedCiphers("TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256");

$success = $ftp->Connect();
if ($success == 0) {
    print $ftp->lastErrorText() . "\r\n";
    exit;
}

#  After connecting, read back what was actually negotiated.
print "Negotiated TLS version: " . $ftp->tlsVersion() . "\r\n";
print "Negotiated cipher suite: " . $ftp->tlsCipherSuite() . "\r\n";

$success = $ftp->Disconnect();
if ($success == 0) {
    print $ftp->lastErrorText() . "\r\n";
    exit;
}