Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - nattapon_c

Pages: [1]
1
SSL / Re: CWP support for TLSv1.3
« on: September 15, 2022, 07:49:32 AM »
1. Upgrad openssl version
cd /usr/local/src
wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz
tar xvf openssl-1.1.1q.tar.gz
mv openssl-1.1.1q openssl
cd openssl
./config --prefix=/usr --openssldir=/usr/lib64 shared
make -j4
make test
make install



2. Now let's test it all. The following command

# openssl ciphers -v | awk '{print $2}' | sort | uniq
SSLv3
TLSv1
TLSv1.2
TLSv1.3

3. Rebuild Apahe ( Webserver Setting > Apache Re-Build )
CWP7 Pro on CentOS 7  is Support TLS v1.3

My Server is running

1. php + php-fpm 7.3.19
2. openssl 1.1.1g
3. apache 2.4.41





Hello brother,
How did you manage to get TLS 1.3 working?
I actually want to disable TLS v1.0 and 1.1 ?

if it's not possible v1.3 then atleast disabling the 1.0 and 1.1 and keep only TLS v1.2 active. I'm afraid to do anything because i have no test server, I'll do it on my running server and I don't want anything bad happen to it. So I'm looking for some help from the experienced men like you.

if you have time will you please share us how to do it.

Note: I'm using Nginx, proxy and apache.

Thanks
Rebuild Apahe

2
Postfix / Postfix can not use tls v1.3 ?
« on: July 22, 2020, 05:16:59 PM »
I has updated postfix and dovecot to lates version,
Gmail connect trused certificate on tlsv1.2 only.
How to rebuild or enable extention to use tlsv1.3 on postfix ??

3
SSL / Re: CWP support for TLSv1.3
« on: July 22, 2020, 09:46:32 AM »
CWP7 Pro on CentOS 7  is Support TLS v1.3

My Server is running

1. php + php-fpm 7.3.19
2. openssl 1.1.1g
3. apache 2.4.41




4
E-Mail / How to Deploy MTA-STS ?
« on: June 09, 2020, 04:06:48 AM »
Mail server with TLS is support and good working. But not pass test on MTA-STS policy in https://starttls-everywhere.org.

Can you recommend a setting for me?

Sample test.
mydomain.com
MTA-STS
MTA-STS is a standard that will make it more difficult to perform downgrade attacks on communications with your mailserver.

We couldn't find an MTA-STS record for your domain.

5
Information / Re: How to redirect webmail to https only
« on: May 25, 2020, 05:14:43 PM »
just install ssl certificate from the control panel ssl install the webmail and ftp and domain ssl, that is,
Yes, My server Installed ssl. But not enforce login to https only, I want to enforce redirect to https

mail.mydomain.com
webmail.mydomain.com 

How to config auto redirect to https ?

6
How to config alias webmail access with ssl ?

 i want to access webmail is url :  https://mail.mydomain.com   with letsencrypt
How to config is file location ?

7
E-Mail / Mail server is bug in forwarder setting
« on: March 18, 2020, 12:52:33 PM »
Hello CWP Support teams,
I create Mail Alias Accounts in Menu > Mail Alias/Forwarder  and test send mail is working forward to other domain, But not  receive in mailbox

1. mail alias name  >>   info@mydomain.com  > forword to > mail1,mail2,mail3 >  is working
2. mail account      >>   info@mydomain.com  > can't receive in mail box (in mail account can not setting forward to other mail)

How to receive data in mailbox and forward to other mail?

8
PHP / Re: PHP Extension for GLPI
« on: February 26, 2020, 09:31:04 AM »
can you double check which php version you installed and which you're using.

Ok Thanks, I Select extension ldap imap in php-fpm before rebuild php-fpm, It Working.

9
PHP / PHP Extension for GLPI
« on: February 21, 2020, 02:32:42 AM »
Hello, Support teams.
My php extension is not present on GLPI. How to Enable extension on php ver. 7.3.14. I get installed on PHP Version Switcher v2 and select Ldap Imap extention and install php-pear-CAS, But testing before installation GLPI shows a failed test message. Please help.



My extension Installed.

Pages: [1]