WHM/CPanel SSL ports setup

[Korske]

Hello,
Could someone please direct me to a post that explains how to setup secure cpanel and whm.
(I am assuming that some one has already asked this). I can only find posts on how to fix, not setup.

Thanks!

[anest]

Hello!
I also have problem with it.

it`s work perfectly with http://hostname:2086 , but doesn`t work with https://hostname:2087
I generated SSL via SSL/TLS -> Reset Server Certificates.

https://hostname - it`s works.

when I restart cpanel ( service cpanel restart ) - it write:
Starting cPanel ssl services: [FAILED]

netstat show, that secure ports (2087, 2083, 2096) doesn`t open.

I try to reinstall cpanel (./upcp -force) - doesn`t help

In cpanel logs show nothing about it.

What I can try else? I need your help, please!!

[chirpy]

Check for stunnel logs in /var/log/messages when you restart cpanel

[anest]

Originally Posted by chirpy

Check for stunnel logs in /var/log/messages when you restart cpanel

Sep 28 17:40:10 russia stunnel[9122]: stunnel 4.04 on i686-pc-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.7a Feb 19 2003
Sep 28 17:40:10 russia stunnel[9122]: FD_SETSIZE=16384, file ulimit=4096 -> 2000 clients allowed
Sep 28 17:40:10 russia stunnel[9122]: Error binding pop3s to 0.0.0.0:995
Sep 28 17:40:10 russia stunnel[9122]: bind: Address already in use (98)
Sep 28 17:40:10 russia cpanel: startstunnel startup failed


anybody understand it?

[chirpy]

Yup. You have some other imap daemon running on the imaps port. Have a look for a file in /etc/xinetd.d/ probably called /etc/xinetd.d/imaps and set disable = yes in the file (do this for any imap service there apart from cpimap) and then restart xinetd:

/etc/init.d/xinetd restart

Then restart cPanel and check whether stunnel is now working.

[anest]

Originally Posted by chirpy

Yup. You have some other imap daemon running on the imaps port. Have a look for a file in /etc/xinetd.d/ probably called /etc/xinetd.d/imaps and set disable = yes in the file (do this for any imap service there apart from cpimap) and then restart xinetd:

/etc/init.d/xinetd restart

Then restart cPanel and check whether stunnel is now working.

Great! Thanks a lot for help!
How I find, it was file popa3ds, when I disable it - cpanel ssl start to work.
But now I cannot use SSL pop3 mail connection, how I understand...

[anest]

em...
now doesn`t work IMAP on server at all. After that story with disabling

[anest]

ok. i fixed it.
thank you, chirpy for your very usefull help!