Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Results 1 to 9 of 9
  1. #1
    Member
    Join Date
    Dec 2007
    Posts
    70

    Default Cpanel access via https?

    hi there

    I have a client asking how he can use https to access his Cpanel, since he has been hacked several times and is worried that his password is being sniffed.

    I can't see how this is possible other than via giving him his own certificate, or certificating the main server hostname.

    Any ideas anyone?

    Ta
    Dude

  2. #2
    cPanel Product Evangelist Infopro's Avatar
    Join Date
    May 2003
    Location
    Pennsylvania
    Posts
    7,894
    cPanel/Enkompass Access Level

    Root Administrator

    Lightbulb

    I must not understand the question. Can't he use hisdomain.com/cpanel or hisdomain.com/webmail ?

    WHM > Tweak Settings > Redirection settings:

    Always redirect to ssl/tls - checked
    When visiting cpanel or whm or webmail with ssl - hostname

    Those settings should do it.
    Fav cPlinks this week: Blog - cPanel & WHM 11.32 we love it! | cPanel University study for it! | Attracta is coming! we want this!

  3. #3
    Member
    Join Date
    Dec 2007
    Posts
    70

    Default

    hi there

    Yes http://www.hisdomain/cpanel and http://www.hisdomain/webmail both work perfectly.

    He is worried that the password is sent in clear text with the above. He wants to use https://www.hisdomain/cpanel and
    https://www.hisdomain/webmail
    or https://www.servername/cpanel or http://www.servername/webmail
    Or any other method that does not allow password sniffing.

    Many thanks
    Dude

  4. #4
    Technical Product Specialist cPanelDavidG's Avatar
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    11,189
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    https://.../cpanel and https://.../webmail should work. Keep in mind, signed SSL Certificates are not required for encryption - but they are there to assist with proving that you are who you say you are.

    If the client is worried about password sniffing, they may wish to scan their workstation(s) for malware.

  5. #5
    cPanel Product Evangelist Infopro's Avatar
    Join Date
    May 2003
    Location
    Pennsylvania
    Posts
    7,894
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    Quote Originally Posted by BigLebowski View Post
    hi there

    Yes http://www.hisdomain/cpanel and http://www.hisdomain/webmail both work perfectly.

    He is worried that the password is sent in clear text with the above. He wants to use https://www.hisdomain/cpanel and
    https://www.hisdomain/webmail
    or https://www.servername/cpanel or http://www.servername/webmail
    Or any other method that does not allow password sniffing.

    Many thanks
    Dude
    The settngs I mentioned should give him what he wants.
    Fav cPlinks this week: Blog - cPanel & WHM 11.32 we love it! | cPanel University study for it! | Attracta is coming! we want this!

  6. #6
    Member
    Join Date
    Dec 2007
    Posts
    70

    Default password sniffing

    hi there

    I've tried https://www.customersdomain.com/cpanel/ and always get "Internet Explorer cannot display the web page". I've tried on several webservers.

    Dude

  7. #7
    Technical Product Specialist cPanelDavidG's Avatar
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    11,189
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    Quote Originally Posted by BigLebowski View Post
    hi there

    I've tried https://www.customersdomain.com/cpanel/ and always get "Internet Explorer cannot display the web page". I've tried on several webservers.

    Dude
    Is the message being displayed due to it being a self-signed SSL certificate? If so, get past the errors and you should be able to login.

  8. #8
    Member cpanelinfoseeker's Avatar
    Join Date
    Oct 2002
    Location
    NE Illinois
    Posts
    320

    Default

    I have tried this on my server also, and found a problem with this.

    on a site without a SSL certificate:
    http://mydomain.com/cpanel WILL redirect to the server with secure login.
    https://mydomain.com/cpanel Dispalys DNS error and will NOT display login.

    on a site with a SSL certificate:
    http://mydomain.com/cpanel WILL redirect to the server with secure login.
    https://mydomain.com/cpanel WILL redirect to the server with secure login.

    It will always take https://server.serverdomain.com/cpanel.

  9. #9
    Technical Product Specialist cPanelDavidG's Avatar
    Join Date
    Nov 2006
    Location
    Houston, TX
    Posts
    11,189
    cPanel/Enkompass Access Level

    Root Administrator

    Default

    Quote Originally Posted by cpanelinfoseeker View Post
    I have tried this on my server also, and found a problem with this.

    on a site without a SSL certificate:
    http://mydomain.com/cpanel WILL redirect to the server with secure login.
    https://mydomain.com/cpanel Dispalys DNS error and will NOT display login.

    on a site with a SSL certificate:
    http://mydomain.com/cpanel WILL redirect to the server with secure login.
    https://mydomain.com/cpanel WILL redirect to the server with secure login.

    It will always take https://server.serverdomain.com/cpanel.
    I recommend you let our technical analysts take a look at your server so this issue can be resolved in a more expedient manner. You can do this by submitting a support ticket.

Similar Threads & Tags
Similar threads

  1. How to allow cpanel/whm access via https only?
    By Roberto in forum cPanel and WHM Discussions
    Replies: 34
    Last Post: 12-26-2010, 04:29 PM
  2. Cannot access cPanel directly with https
    By echelondigital in forum cPanel and WHM Discussions
    Replies: 8
    Last Post: 12-19-2007, 12:57 PM
  3. can't access cpanel using /cpanel, only direct port? https not working
    By jacksony in forum cPanel and WHM Discussions
    Replies: 9
    Last Post: 01-17-2006, 11:06 AM
  4. CPanel/WHM Access over HTTPS
    By Piratez in forum cPanel and WHM Discussions
    Replies: 4
    Last Post: 01-05-2006, 05:52 PM
  5. login error if useing https to access cpanel
    By yipoon in forum cPanel and WHM Discussions
    Replies: 0
    Last Post: 11-14-2003, 12:05 PM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube