port 2096 disable SSLv2

[izghitu]

Hi,

I am failing the PCI compliance scan at Security Metrics because of port 2096:

Description: SSL server accepts SSLv2 protocol Severity: Potential Problem Impact: A remote attacker with the ability to sniff network traffic could decrypt an encrypted session. Resolution For Apache mod_ssl web servers, use the [http://httpd.apache.org/docs/2.0/mod/mo d_ssl.html#sslciphersuite] SSLCipherSuite
.......

The cpsrvd service is listening on that port, can anyone please tell me how do I disable SSLv2 for that service?

THanks in advance.

[faisikhan]

Hi izghitu,

Did you see that link?
/http://blog.serverbuddies.com/tag/disable-sslv2-on-cpanel-and-apache-ports/ I hope it will help you to disable SSLv2.

[cPanelEric]

Howdy,

Nice workaround.

Thanks!

[nibin]

Hello,

One issue I ntoiced while switching to stunnel is, cpanel access log will show the IP 127.0.0.1 for any cPanel / WHM access. So we can't trace the exact source IP, if we want to do it any time!

Thank you,
Nibin.

[cpanelkenneth]

To the original poster, you can modify the ciphers used by cpsrvd using the cPanel Web Services Configuration interface in WHM.