Disabling TLSv1 in cPanel - Revision history

Docs admin at 17:12, 25 October 2016

2016-10-25T17:12:57Z

← Older revision		Revision as of 13:12, 25 October 2016
Line 46:		Line 46:

	15) Scroll all the way to the bottom of the window, and then click save		15) Scroll all the way to the bottom of the window, and then click save

			16) Once Exim restarts, you are done


	If you run into any problems, please open a support ticket with the exact problem and error message at the {{Client Area}} and we will be able to assist you further.		If you run into any problems, please open a support ticket with the exact problem and error message at the {{Client Area}} and we will be able to assist you further.

Docs admin at 17:11, 25 October 2016

2016-10-25T17:11:11Z

← Older revision		Revision as of 13:11, 25 October 2016
Line 25:		Line 25:
	7) Click Save at the bottom of the page.		7) Click Save at the bottom of the page.

	8) ~~Go to Service Configuration -> cPanel Web Disk Configuration.~~		8) On the next page Click Rebuild Apache Config and Restart

	9) Replace the existing TLS/SSL Protocols with the following		9) When that completes, Go to Service Configuration -> cPanel Web Disk Configuration.

			10) Replace the existing TLS/SSL Protocols with the following
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	SSLv23:!SSLv2:!SSLv3:!TLSv1		SSLv23:!SSLv2:!SSLv3:!TLSv1
	</syntaxhighlight>		</syntaxhighlight>

	10) Click Save		11) Click Save

	11) Go to Service Configuration -> Exim Configuration Manager -> Advanced Editor		12) Go to Service Configuration -> Exim Configuration Manager -> Advanced Editor

	12) Click "Ctrl-F" to open a find dialog at the bottom of the browser, and search for "openssl_options"		13) Click "Ctrl-F" to open a find dialog at the bottom of the browser, and search for "openssl_options"

	13) Replace the existing contents of the box to the right with the following		14) Replace the existing contents of the box to the right with the following
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	+no_sslv2 +no_sslv3 +no_tlsv1		+no_sslv2 +no_sslv3 +no_tlsv1
	</syntaxhighlight>		</syntaxhighlight>

	14) Scroll all the way to the bottom of the window, and then click save		15) Scroll all the way to the bottom of the window, and then click save


	If you run into any problems, please open a support ticket with the exact problem and error message at the {{Client Area}} and we will be able to assist you further.		If you run into any problems, please open a support ticket with the exact problem and error message at the {{Client Area}} and we will be able to assist you further.

Docs admin at 16:07, 25 October 2016

2016-10-25T16:07:02Z

← Older revision		Revision as of 12:07, 25 October 2016
Line 1:		Line 1:
	Due to recent changes in the PCI DSS Security Standards, TLSv1 is no longer accepted by most servers. This can cause delays in mail delivery and many other activities on servers.		Due to recent changes in the PCI DSS Security Standards, TLSv1 is no longer accepted by most servers. This can cause delays in mail delivery and many other activities on servers.

	So to proactively prevent any issues, it is recommended to ~~disabled~~ TLSv1 within WHM/cPanel. There are 4 places in WHM where the protocol list needs to be updated.		So to proactively prevent any issues, it is recommended to disable TLSv1 within WHM/cPanel. There are 4 places in WHM where the protocol list needs to be updated.

Docs admin: Created page with "Due to recent changes in the PCI DSS Security Standards, TLSv1 is no longer accepted by most servers. This can cause delays in mail delivery and many other activities on ser..."

2016-10-25T16:06:23Z

Created page with "Due to recent changes in the PCI DSS Security Standards, TLSv1 is no longer accepted by most servers. This can cause delays in mail delivery and many other activities on ser..."

New page

Due to recent changes in the PCI DSS Security Standards, TLSv1 is no longer accepted by most servers. This can cause delays in mail delivery and many other activities on servers.

So to proactively prevent any issues, it is recommended to disabled TLSv1 within WHM/cPanel. There are 4 places in WHM where the protocol list needs to be updated.

1) Log into WHM

2) Go to Service Configuration -> cPanel Web Services Configuration

3) Replace the existign TLS/SSL Protocols list with the following
<syntaxhighlight lang="bash">
SSLv23:!SSLv2:!SSLv3:!TLSv1
</syntaxhighlight>

4) Click Save

5) Go to Service Configuration -> Apache Configuration -> SSL/TLS Protocols

6) Check the lower Radial button to edit the line, and replace with the following
<syntaxhighlight lang="bash">
All -SSLv2 -SSLv3 -TLSv1
</syntaxhighlight>

7) Click Save at the bottom of the page.

8) Go to Service Configuration -> cPanel Web Disk Configuration.

9) Replace the existing TLS/SSL Protocols with the following
<syntaxhighlight lang="bash">
SSLv23:!SSLv2:!SSLv3:!TLSv1
</syntaxhighlight>

10) Click Save

11) Go to Service Configuration -> Exim Configuration Manager -> Advanced Editor

12) Click "Ctrl-F" to open a find dialog at the bottom of the browser, and search for "openssl_options"

13) Replace the existing contents of the box to the right with the following
<syntaxhighlight lang="bash">
+no_sslv2 +no_sslv3 +no_tlsv1
</syntaxhighlight>

14) Scroll all the way to the bottom of the window, and then click save

If you run into any problems, please open a support ticket with the exact problem and error message at the {{Client Area}} and we will be able to assist you further.