#1 (permalink)  
Old 09-27-2005, 10:09 AM
Korske's Avatar
Registered User
 
Join Date: Nov 2004
Posts: 2
Korske is on a distinguished road
WHM/CPanel SSL ports setup

Hello,
Could someone please direct me to a post that explains how to setup secure cpanel and whm.
(I am assuming that some one has already asked this). I can only find posts on how to fix, not setup.

Thanks!
__________________
Korske
www.korske.com
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 09-27-2005, 07:11 PM
Registered User
 
Join Date: Sep 2005
Posts: 21
anest is on a distinguished road
Hello!
I also have problem with it.

it`s work perfectly with http://hostname:2086 , but doesn`t work with https://hostname:2087
I generated SSL via SSL/TLS -> Reset Server Certificates.

https://hostname - it`s works.

when I restart cpanel ( service cpanel restart ) - it write:
Starting cPanel ssl services: [FAILED]

netstat show, that secure ports (2087, 2083, 2096) doesn`t open.

I try to reinstall cpanel (./upcp -force) - doesn`t help

In cpanel logs show nothing about it.

What I can try else? I need your help, please!!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 09-28-2005, 04:55 AM
chirpy's Avatar
Moderator
 
Join Date: Jun 2002
Location: Go on, have a guess
Posts: 13,495
chirpy will become famous soon enough
Check for stunnel logs in /var/log/messages when you restart cpanel
__________________
Jonathan Michaelson
cPanel Forum Moderator

Need your cPanel servers secured and tuned?
cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
http://www.configserver.com
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 09-28-2005, 09:37 AM
Registered User
 
Join Date: Sep 2005
Posts: 21
anest is on a distinguished road
Quote:
Originally Posted by chirpy
Check for stunnel logs in /var/log/messages when you restart cpanel

Sep 28 17:40:10 russia stunnel[9122]: stunnel 4.04 on i686-pc-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.7a Feb 19 2003
Sep 28 17:40:10 russia stunnel[9122]: FD_SETSIZE=16384, file ulimit=4096 -> 2000 clients allowed
Sep 28 17:40:10 russia stunnel[9122]: Error binding pop3s to 0.0.0.0:995
Sep 28 17:40:10 russia stunnel[9122]: bind: Address already in use (98)
Sep 28 17:40:10 russia cpanel: startstunnel startup failed


anybody understand it?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 09-28-2005, 11:13 AM
chirpy's Avatar
Moderator
 
Join Date: Jun 2002
Location: Go on, have a guess
Posts: 13,495
chirpy will become famous soon enough
Yup. You have some other imap daemon running on the imaps port. Have a look for a file in /etc/xinetd.d/ probably called /etc/xinetd.d/imaps and set disable = yes in the file (do this for any imap service there apart from cpimap) and then restart xinetd:

/etc/init.d/xinetd restart

Then restart cPanel and check whether stunnel is now working.
__________________
Jonathan Michaelson
cPanel Forum Moderator

Need your cPanel servers secured and tuned?
cPanel Server Configuration, Security, Recovery and Antivirus/AntiSpam Services
Developers of the most effective (and free) Firewall & Security Solution for cPanel Servers - csf
http://www.configserver.com
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 09-28-2005, 12:24 PM
Registered User
 
Join Date: Sep 2005
Posts: 21
anest is on a distinguished road
Quote:
Originally Posted by chirpy
Yup. You have some other imap daemon running on the imaps port. Have a look for a file in /etc/xinetd.d/ probably called /etc/xinetd.d/imaps and set disable = yes in the file (do this for any imap service there apart from cpimap) and then restart xinetd:

/etc/init.d/xinetd restart

Then restart cPanel and check whether stunnel is now working.

Great! Thanks a lot for help!
How I find, it was file popa3ds, when I disable it - cpanel ssl start to work.
But now I cannot use SSL pop3 mail connection, how I understand...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 09-28-2005, 01:53 PM
Registered User
 
Join Date: Sep 2005
Posts: 21
anest is on a distinguished road
em...
now doesn`t work IMAP on server at all. After that story with disabling
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 09-28-2005, 02:32 PM
Registered User
 
Join Date: Sep 2005
Posts: 21
anest is on a distinguished road
Smile

ok. i fixed it.
thank you, chirpy for your very usefull help!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 07:45 AM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
© cPanel Inc