Skip to main content

[CPANEL-23772] Pure-FTPd Couldn't load the DH parameters file

Comments

11 comments

  • Spirogg
    Also when restarting FTP i get this error Restarting FTP Server Waiting for "pureftpd" to restart "waiting for "pureftpd" to initialize "finished. Service Status pure-ftpd (pure-ftpd (SERVER)) is running as root with PID 19769 (systemd+/proc check method). Startup Log Feb 21 03:29:51 server.xxxx.com systemd[1]: Started Pure-FTPd. Feb 21 03:29:51 server.xxxx.com systemd[1]: Starting Pure-FTPd... Feb 21 03:29:51 server.xxxx.com pure-ftpd[19769]: (?@?) [DEBUG] Couldn't load the DH parameters file /etc/ssl/private/pure-ftpd-dhparams.pem Startup Log Feb 21 03:29:51 server.xxxx.com systemd[1]: Started Pure-FTPd. Feb 21 03:29:51 server.xxxx.com systemd[1]: Starting Pure-FTPd... Feb 21 03:29:51 server.xxxx.com pure-ftpd[19769]: (?@?) [DEBUG] Couldn't load the DH parameters file /etc/ssl/private/pure-ftpd-dhparams.pem pureftpd restarted successfully.
    0
  • cPanelMichael
    Couldn't load the DH parameters file

    Hello, 1. Try running the following commands to see if it solves this issue (note this can take several minutes to complete): openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 3072 /scripts/restartsrv_pureftpd
    2. As far as tailwatchd, the restart should have solved that issue. If not, please open a separate forums thread and include the output from the following command: ps aux|grep tailwatch
    Thank you.
    0
  • Spirogg
    hi ok thanks for this code it solved the one issue openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048 /scripts/restartsrv_pureftpd i posted another thread for the other issue
    0
  • Spirogg
    Hello, 1. Try running the following commands to see if it solves this issue: openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048 /scripts/restartsrv_pureftpd
    2. As far as tailwatchd, the restart should have solved that issue. If not, please open a separate forums thread and include the output from the following command: ps aux|grep tailwatch
    Thank you.

    Hello, I have a quick Question would we have better security if we were to use openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 4096 /scripts/restartsrv_pureftpd
    or is there a reson why you suggest openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048 /scripts/restartsrv_pureftpd
    just wondering, also why is this still an issue with a fresh install of cPanel ?can you guys fix this so we dont have to do this everytime we install cPanel ? thanks so much in advance, Spiro
    0
  • cPanelMichael
    Hello @Spirogg, 2048 was recommended in order to suppress the warning message and generate the parameters as quickly as possible. However, in order to provide 128-bit security, which is the lower bound for adequate security, Diffie-Hellman parameters should be at least 3072 bits in size. I've updated my previous post to reflect this. We stopped generating the Diffie-Hellman parameters at compile time in cPanel & WHM version 56 due to a lack of compatibility with Java version 8 (Java 8 doesn't support parameters larger than 2048 bits in size). Since it's been some time since that change was made, I've opened internal case CPANEL-23772 to explore suppressing this warning message when Pure-FTPd starts, or generating the Diffie-Hellman parameters at compile time again. I'll monitor this case and update this thread with more information as it becomes available. Thank you.
    0
  • Spirogg
    ok thanks
    0
  • Spirogg
    @cPanelMichael Hi any word on this case ? I've opened internal case CPANEL-23772 to explore suppressing this warning message when Pure-FTPd starts, or generating the Diffie-Hellman parameters at compile time again. I still need to do the following in ssh openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048 /scripts/restartsrv_pureftpd
    Thanks Spiro
    0
  • cPanelMichael
    Hi any word on this case ?

    Hello :) There's no update to report at this time, however the case is still open. Is this leading to any specific issues beyond the additional output that's visible when restarting Pure-FTPd? Thank you.
    0
  • cPanelMichael
    Hello, To update, the following case is scheduled for inclusion with cPanel & WHM Version 86: " CPANEL-23772 - Create and ship 3072-bit DH parameters You can monitor Thank you.
    0
  • Spirogg
    Hello, To update, the following case is scheduled for inclusion with cPanel & WHM Version 86: " CPANEL-23772 - Create and ship 3072-bit DH parameters You can monitor Thank you.

    Hello there @cPanelMichael thanks so much for the heads up and for getting them to get this working correctly :) much appreciated :)
    0
  • Spirogg
    Hello, To update, the following case is scheduled for inclusion with cPanel & WHM Version 86: " CPANEL-23772 - Create and ship 3072-bit DH parameters You can monitor Thank you.

    thank you @cPanelMichael & @cPanelLauren you two did it they fix this issue :) you both are the Greatest .... wishing you and your Families and the Rest of the Crew at cPanel Great Health and Stay Safe.. Best Regards, Spiro
    0

Please sign in to leave a comment.