From the command-line how do I set the SSL and TLS suites and protocols for Web Disk(cpdavd), cPanel, Dovecot, or Exim?

Question

Using the command line, how can I set the SSL and TLS suites and protocols settings for the cPanel services, such as:

• Web Disk (cpdavd).
• The cPanel server (cpsrvd).
• The Dovecot® mail server (dovecot).
• Exim configuration settings (Exim).

Answer

The set-tls-settings script configures a server’s Secure Socket Layer (SSL) and Transport Layer Security (TLS) cipher suites and protocols for the following services:

• Web Disk (cpdavd).
• The cPanel server (cpsrvd).
• The Dovecot® mail server (dovecot).
• Exim configuration settings (Exim).

To configure the default ciphers and protocols:

/usr/local/cpanel/bin/set-tls-settings --protocols=SSLv3:TLSv1.2 --cipher-suites=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 --all --restart

You can read more on the options and formatting in our documentation.

The set-tls-settings Script