{"id":904,"date":"2021-07-23T12:40:53","date_gmt":"2021-07-23T12:40:53","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/cpanel-web-services-configuration\/"},"modified":"2021-07-23T12:40:53","modified_gmt":"2021-07-23T12:40:53","slug":"cpanel-web-services-configuration","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/cpanel-web-services-configuration\/","title":{"rendered":"cPanel Web Services Configuration"},"content":{"rendered":"<\/p>\n
\n
\n
\n

Valid for versions 88 through the latest version<\/em><\/p>\n<\/div>\n

\n

Version:<\/h4>\n

82<\/h4>\n

86<\/h4>\n

88<\/h4>\n<\/div><\/div>\n
\n

Overview<\/h2>\n

The system uses cipher suites to negotiate security settings for network connections over TLS\/SSL. This interface allows you to edit the TLS\/SSL Cipher List and TLS\/SSL Protocol list for cPanel, WHM, and Webmail.<\/p>\n

\n
Warning:<\/div>\n
\n

We recommend that only<\/strong> advanced users edit the cipher and protocol lists.<\/p>\n<\/p><\/div>\n<\/div>\n

\n
Important:<\/div>\n
\n

cPanel & WHM supports Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3:<\/p>\n

    \n
  • cPanel & WHM only supports TLSv1.2 or newer. The system enables TLSv1.2 by default.<\/li>\n
  • Not all clients will support TLSv1.3, which requires OpenSSL 1.1.1 or higher.<\/li>\n<\/ul><\/div>\n<\/div>\n

    Defaults<\/h2>\n

    By default, cPanel & WHM uses the following cipher list for web services:<\/p>\n

    \n

    Click to view…<\/p>\n

    \n
    \n
    \n
    ECDHE-<\/span>ECDSA-<\/span>AES128-<\/span>GCM-<\/span>SHA256:ECDHE-<\/span>RSA-<\/span>AES128-<\/span>GCM-<\/span>SHA256:ECDHE-<\/span>ECDSA-<\/span>AES256-<\/span>GCM-<\/span>SHA384:ECDHE-<\/span>RSA-<\/span>AES256-<\/span>GCM-<\/span>SHA384:ECDHE-<\/span>ECDSA-<\/span>CHACHA20-<\/span>POLY1305:ECDHE-<\/span>RSA-<\/span>CHACHA20-<\/span>POLY1305:DHE-<\/span>RSA-<\/span>AES128-<\/span>GCM-<\/span>SHA256:DHE-<\/span>RSA-<\/span>AES256-<\/span>GCM-<\/span>SHA384<\/code><\/pre>\n<\/div><\/div>\n<\/p><\/div>\n<\/div>\n
    By default, cPanel & WHM uses the following protocol list for web services:<\/p>\n
    \n
            Click to view…<\/p>\n
    \n
    \n
    \n
    SSLv23:!<\/span>SSLv2:!<\/span>SSLv3:!<\/span>TLSv1:!<\/span>TLSv1_1<\/code><\/pre>\n<\/div><\/div>\n<\/p><\/div>\n<\/div>\n
    Edit the cipher list<\/h2>\n
    To edit the cipher list, enter the appropriate cipher in the text box and click Save<\/em>.<\/p>\n
    \n
    Note:<\/div>\n
    \n
      \n
    • \n
      The default cipher list is PCI compliant. To edit the cipher list to improve the security level on your server, read Apache\u2019s SSLCipherSuite Directive documentation.<\/p>\n<\/li>\n
    • \n
      We do not<\/strong> recommend that you edit the cipher list to lower the security level. Make certain that the cipher suite uses at least<\/strong> 128-bit encryption.<\/p>\n<\/li>\n<\/ul><\/div>\n<\/div>\n
      Edit the protocol list<\/h2>\n
      To edit the protocol list, enter the appropriate protocol list in the text box and click Save<\/em>.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
      Valid for versions 88 through the latest version Version: 82 86 88 Overview The system uses cipher suites to negotiate security settings for network connections over TLS\/SSL. This interface allows you to edit the TLS\/SSL Cipher List and TLS\/SSL Protocol list for cPanel, WHM, and Webmail. Warning: We recommend that only advanced users edit the …<\/p>\n","protected":false},"author":1,"featured_media":905,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/904"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=904"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/904\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/905"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=904"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=904"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}