Baza znanja
cPanel Web Services Configuration Ispiši članak
Overview:
The system uses cipher suites to negotiate security settings for network connections over TLS/SSL. This interface allows you to edit the TLS/SSL Cipher List and TLS/SSL Protocol list for cPanel, WHM, and Webmail.
We recommend that only advanced users edit the cipher and protocol lists.
cPanel & WHM supports Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3:
- cPanel & WHM only supports TLSv1.2 or newer. The system enables TLSv1.2 by default.
- Not all clients will support TLSv1.3, which requires OpenSSL 1.1.1 or higher.
Defaults
By default, cPanel & WHM uses the following cipher list for web services:
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
By default, cPanel & WHM uses the following protocol list for web services:
SSLv23:!SSLv2:!SSLv3:!TLSv1:!TLSv1_1
Edit the cipher list
To edit the cipher list, enter the appropriate cipher in the text box and click Save.
-
The default cipher list is PCI compliant. To edit the cipher list to improve the security level on your server, read Apache’s SSLCipherSuite Directive documentation.
-
We do not recommend that you edit the cipher list to lower the security level. Make certain that the cipher suite uses at least 128-bit encryption.
Edit the protocol list
To edit the protocol list, enter the appropriate protocol list in the text box and click Save.
Je li Vam ovaj odgovor pomogao?
Vezani članci
This collection of features allows you to configure Apache. Apache functions as your web server...
Overview: This interface allows you to select cPanel & WHM log files for the cpanellogd...
Overview: The system uses cipher suites to negotiate security settings for Web Disk network...
Overview: Visitors see the index page by default when they access a directory (for example,...
Overview: Note: Some settings may not appear if your server does not use the Standard Node...
