<IfModule mod_tls.c>
  TLSEngine                               on
  TLSLog                                  /var/log/proftpd/tls.log
  TLSProtocol                             TLSv1.2 TLSv1.3

  TLSCipherSuite                          HIGH:!aNULL:!MD5

  TLSRSACertificateFile                   /etc/proftpd/server.crt
  TLSRSACertificateKeyFile                /etc/proftpd/server.key

  TLSCACertificateFile                    /etc/proftpd/ca.crt
  TLSVerifyClient                         off
  TLSRequired                             off
  TLSOptions                              EnableDiags NoSessionReuseRequired
  RequireValidShell                       no

  <VirtualHost hosting103.resellerdns.nl>
    TLSEngine on
    TLSOptions UseImplicitSSL

    Port 990
    TLSLog                                  /var/log/proftpd/tls.log

    TLSRSACertificateFile                   /etc/proftpd/server.crt
    TLSRSACertificateKeyFile                /etc/proftpd/server.key

    TLSCACertificateFile                    /etc/proftpd/ca.crt
    TLSVerifyClient                         off
    TLSRequired                             on
    TLSOptions                              NoSessionReuseRequired
    RequireValidShell                       no
  </VirtualHost>
  </IfModule>