Enable TLS 1.2 on cPanel

DPNmw

• April 11, 2017 20:24

I would like to know if it's possible to enable tsl 1.2 support on my cpanel server and if yes where can I go to find information on that as I've been searching and can't find a direct up to date answer. I currently have a cloud vps with [LIST]

CENTOS 6.9 x86_64 kvm

WHM 62.0 (build 20) [LIST]

Easy Apache 4 (Apache 2.4, PHP 5.5, PHP 5.6, and PHP 7.0 )

• 

  cPanelMichael

  • April 12, 2017 15:31

  Hello, The following document explains how to adjust the cipher protocol on each service: How to Adjust Cipher Protocols - cPanel Knowledge Base - cPanel Documentation Let us know if this helps. Thank you.

  0
• 

  DPNmw

  • April 14, 2017 01:26

  Unfortunately no, I need to know how to enable the TLS 1.2 and not conflict with cpanel. That reference document only explains the difference in tls and services impacted. Is there any document that you can link me to that will guide the change from 1.1 to 1.2 without breaking or conflicting with anything

  0
• 

  cPanelMichael

  • April 14, 2017 17:22

  Hello, Could you provide some more background on what's leading to issues with TLS 1.2 so we can offer more concise instructions? For instance, is this for Apache, or another service (e.g. FTP, cpsrvd)? Is it related to a PCI compliance scan? Thank you.

  0
• 

  WorkinOnIt

  • August 31, 2017 13:04

  Hello - I also have this issue. How can I check if TLS 1.2 is possible / enabled on the cpanel server? The reason for doing this is PCI compliance. PayPal are mandating that all HTTPS traffic for e.g. IPN etc, must be TLS 1.2 Date Change for Migrating from SSL and Early TLS

  0
• 

  cPanelMichael

  • August 31, 2017 17:33

  Hello, Support for TLS 1.2 connections is enabled by default with the OpenSSL package available in CentOS 6 or newer. If you are still using CentoS 5 (it's at end-of-life status), then the you'd need to use a manual workaround like the one referenced on the following thread: Update cPanel to TLS 1.2 without modifying system files [php5 + curlssl + apache2.4.x] The current plan is to automatically set TLS defaults to be suitable for TLS 1.2 only starting in cPanel version 68, however you can manually configure this now by following the instructions on the thread below: I need to disable TLS v1.0 Thank you.

  0
• 

  WorkinOnIt

  • September 01, 2017 02:29

  Great thanks. I was able to see it listed in phpinfo also.

  0

Please sign in to leave a comment.