error during enable TLSv1.3 in cPanel86

[bejbi]

After update cPanel to v86 whe I try to enable TSLv1.3
I add in Apache Global Configuration:
TLSv1.2 TLSv1.3
(space separated)

But after this - only TLSv1.3 works !
It was checked olso via: SSL Server Test (Powered by Qualys SSL Labs)

It is probably bug in cPanel

I changed to:
All -SSLv3 -TLSv1 -TLSv1.1

and it works. But it is only walkaround

 

[Spirit55555]

I have the same problem, can confirm that the posted workaround works.

 

[cPanelLauren]

You must specify what you're adding if you're adding more than one in this instance. I can confirm the following works:

+TLSv1.2 +TLSv1.3

My output from SSL Labs when using this indicates the following:

 

[ciao70]

You must specify what you're adding if you're adding more than one in this instance. I can confirm the following works:

+TLSv1.2 +TLSv1.3

My output from SSL Labs when using this indicates the following:

View attachment 63573

+TLSv1.2 +TLSv1.3

Works



For Enable TLS 1.3 on Cpanel/WHM?

Thanks

 

[bonny3]

Hi,
Can you indicate where to activate and how Tls1.3 please?

 

[ciao70]

Hello,

For Apache

WHM’s Global Configuration interface (Home >> WHM >> Service Configuration >> Apache Configuration >> Global Configuration).

+TLSv1.2 +TLSv1.3

 

[cPanelLauren]

Hello,

For Apache

WHM’s Global Configuration interface (Home >> WHM >> Service Configuration >> Apache Configuration >> Global Configuration).

+TLSv1.2 +TLSv1.3

This is correct, thanks @ciao70

 

[ciao70]

Hello,

For Enable TLS 1.3 on Cpanel/WHM?


always +TLSv1.2 +TLSv1.3 ?

 

[bonny3]

that's right?

 

[ciao70]

Change in

+TLSv1.2 +TLSv1.3

 

[bonny3]

Change in

+TLSv1.2 +TLSv1.3

should this part be eliminated?
ALL -SSLv3 -TLSv1 -TLSv1.1

 

[ciao70]

Yes

Only

+TLSv1.2 +TLSv1.3

 

[bonny3]

Yes

Only

+TLSv1.2 +TLSv1.3

Ok Thanks..

ALL -SSLv3 -TLSv1 -TLSv1.1
are these systems no longer used?

 

[ciao70]

I do not know

error during enable TLSv1.3 in cPanel86

After update cPanel to v86 whe I try to enable TSLv1.3 I add in Apache Global Configuration: TLSv1.2 TLSv1.3 (space separated) But after this - only TLSv1.3 works ! It was checked olso via: SSL Server Test (Powered by Qualys SSL Labs) It is probably bug in cPanel I changed to: All -SSLv3...

forums.cpanel.net

 

[cPanelLauren]

They should not be used any longer, cPanel does not automatically support them either.

 

[ciao70]

They should not be used any longer, cPanel does not automatically support them either.

For Enable TLS 1.3 on Cpanel/WHM?

Service Configuration ---->cPanel Web Services Configuration


always

+TLSv1.2 +TLSv1.3 ?

Thanks

 

[vlee]

How about the other services for +TLSv1.2 +TLSv1.3 like the ones below

cPanel Web Disk Configuration
Currently set to SSLv23:!SSLv2:!SSLv3

cPanel Web Services Configuration
Currently set to SSLv23:!SSLv2:!SSLv3

Mailserver Configuration
SSL Minimum Protocol Currently set to TLSv1.2

Exim Configuration Manager ==> Security
Currently set to +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 default

How do you change those ones above to use +TLSv1.2 +TLSv1.3?

 

[PbG]

I would like to know this as well?

How about the other services for +TLSv1.2 +TLSv1.3 like the ones below

cPanel Web Disk Configuration
Currently set to SSLv23:!SSLv2:!SSLv3

cPanel Web Services Configuration
Currently set to SSLv23:!SSLv2:!SSLv3

Mailserver Configuration
SSL Minimum Protocol Currently set to TLSv1.2

Exim Configuration Manager ==> Security
Currently set to +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 default

How do you change those ones above to use +TLSv1.2 +TLSv1.3?

 

[cPanelLauren]

The OpenSSL package that was released was for EasyApache 86 Release Notes | cPanel & WHM Documentation which covers OpenSSL for Apache related services.

This is not the same package that covers it for the system which includes other services which is at OpenSSL 1.0.2k-fips 26 Jan 2017

I also want to point out that I did notice our documentation was a little unclear on this and I've opened a case to have it clarified.

 

[yaashul]

No change in SSL Cipher Suite need to enable TLS 1.3?