All CWP panel force to using SSL

Started by randyproxz, April 09, 2019, 04:15:54 AM

Previous topic - Next topic

randyproxz

My cwp panel has been down because its redirect to using SSL. All port from 2030 redirect to 2031.

And after login it will automatically logout because "invalid session"

What happen to cwp?

studio4host

why do you even use HTTP for root login, this is highly insecure and you should use HTTPS over your hostname.

Also, this is http to https redirect so it has no anything with the sessions, it can be related to only that you have multiple windows in the same browser open with the different sessions id.
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.

guille791

Hi, I have the some problem. Please help. How do disabled force all url to secure port ssl?

randyproxz

Quote from: guille791 on April 09, 2019, 03:14:04 PM
Hi, I have the some problem. Please help. How do disabled force all url to secure port ssl?

You can't disabled or modify anything in CWP. It's useless.
The next any CWP update will erase your all configuration on your server.

So, I suggest you follow all the rules.
Because the only CWP's team has rules to modify your server or CWP config.

studio4host

It's simple config, but it's not recommended to disable it as https is now standard and all important logins are moving to https

admin
/usr/local/cwpsrv/conf/cwpsrv.conf

user
/usr/local/cwpsrv/conf.d/users.conf

comment line with return 301 to disable redirect
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.


regatcwp

Please don't force to redirect http to https. Users should choose to use http or https.

randyproxz

Quote from: studio4host on April 09, 2019, 11:11:12 AM
why do you even use HTTP for root login, this is highly insecure and you should use HTTPS over your hostname.

Also, this is http to https redirect so it has no anything with the sessions, it can be related to only that you have multiple windows in the same browser open with the different sessions id.

Just convince us if all must be force to SSL, auto renew SSL for hostname must be run perfectly.
Because there are some cases on my server auto renew SSL does not work even it has been configured and checked "auto renovation" as active.

Charles

Hey can u pls tell me the effects if someone force http to https...I mean i have heard it alot but dont know what happens...Can u pls explain.Thanks

Charles

Quote from: Charles on April 13, 2019, 10:27:41 AM
Hey can u pls tell me the effects if someone force http to https...I mean i have heard it alot but dont know what happens...Can u pls explain.Thanks
What happened ?Waiting for your answer.As i really want to know about it..I hope u will reply soon on MyCCPay

Igor S.

hi, the login and password you use will be encrypted if used httpS
If you use http they will be sent to the server as plain text.
;)



You can ask me to solve any problem with your server for some money in pm  ;)






Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp

Installation Instructions
http://centos-webpanel.com/installation-instructions

Get Fast Support Here
http://centos-webpanel.com/support-services