Messages

1

Installation / Can't start Webpanel

« on: May 13, 2019, 07:12:59 AM »

Steps to resolve the issue:-
==========

1. After CWP installation, First of all, Make sure 2030, 2031, 2086, 2087 Ports are opened on the server firewall.
2. To open ports in CSF, you will want to edit these lines in this file OR /etc/csf/csf.conf file.:-

run below command:-
$ vi /etc/csf/csf.conf

# Allow incoming TCP ports

TCP_IN =  "20,21,22,25,26,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096,2030,2031,2086,2087"
# Allow outgoing TCP ports

TCP_OUT = "20,21,22,25,26,37,43,53,80,110,113,443,465,873,2087,2089,2703"
# Allow incoming UDP ports

UDP_IN = "20,21,53,465,6277,24441"
# Allow outgoing UDP ports

3. Save and exit the file via below command:-
$ Esc + :wq!

4. Restart the Firewall.

$ csf -r

Now check your CWP panel status.


5.If you're getting SSL certificate error so please follow the below steps:-

A. Make sure your server hostname resolving to your server IP address. And Check PTR records and make sure IP resolving to your server hostname.
B. If both are resolving then run below command on your CWP server.

$ /scripts/generate_hostname_ssl

C. Hostname add to /usr/local/apache/conf.d/hostname-ssl.conf.
D. Go to private key directory.
$ cd /etc/pki/tls/private
$ cat $hostname.key

E. Go to Certificate directory.
$ cd /etc/pki/tls/certs
$ cat $hostname.crt
$ cat $hostname.bundle

F. make sure the certificate and the private key are matching.
# refer below URL:-
https://www.sslshopper.com/certificate-key-matcher.html

and paste you crt and key and verify the same.

G. Edit the hostname virtualhost file.

$ vi /usr/local/apache/conf.d/hostname-ssl.conf


You will see SSL file path looks like this:-

SSLEngine on
SSLCipherSuite ALL:!ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
SSLProtocol All -SSLv2 -SSLv3
SSLCertificateFile /etc/pki/tls/certs/hostname.cert
SSLCertificateKeyFile /etc/pki/tls/private/hostname.key
SSLCertificateChainFile /etc/pki/tls/certs/hostname.bundle
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown


Please be ensure the path is correct of SSL files.

H. Check the Apache Syntax via run below command:-

$ /usr/local/apache/bin/apachectl -t

I. If the Sytax are Ok then restart httpd service.

$ service httpd restart

6. Restart the CWP, dovecot and postfix service.

$ service cwp restart
$ service dovecot restart
$ service postfix restart

7. Now check your CWP, It will works without any error.
+==================================+

Thank You
Shubhi