Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
226
Problems on other RedHat linux servers / Re: How to Adjust my SSH Server ? Almalinux 8
« on: January 22, 2025, 02:03:12 AM »
Here is some light reading for you, for when you can't fall asleep. 
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/security_guide/sec-hardening_tls_configuration#sec-Choosing_Algorithms_to_Enable
--
https://community.centminmod.com/threads/openssh-chacha20-ciphers-for-terrapin-security-vulnerability-attacks.25043/
--
https://serverfault.com/questions/1148295/tls-cipher-suites-ordering
--
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening#setting-up-system-wide-crypto-policies-in-the-web-console_using-the-system-wide-cryptographic-policies
Scroll down to 3.6.1 Open SSH
--
And IF you want to open a can of worms and headaches...
https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4823.pdf
--
Then once done with SSH, you have Apache to configure...
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/security_guide/sec-hardening_tls_configuration#sec-Choosing_Algorithms_to_Enable
--
https://community.centminmod.com/threads/openssh-chacha20-ciphers-for-terrapin-security-vulnerability-attacks.25043/
--
https://serverfault.com/questions/1148295/tls-cipher-suites-ordering
--
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening#setting-up-system-wide-crypto-policies-in-the-web-console_using-the-system-wide-cryptographic-policies
Scroll down to 3.6.1 Open SSH
--
And IF you want to open a can of worms and headaches...
https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4823.pdf
--
Then once done with SSH, you have Apache to configure...
227
PHP / Re: Anti-Change Log
« on: January 22, 2025, 01:48:58 AM »1. You just need to add the version number and nothing else.
2. For main php version (php switcher) modify the file:
/usr/local/cwpsrv/htdocs/resources/conf/el9/php_switcher/versions.ini
Tried, but didn't work. :/
228
Problems on other RedHat linux servers / Re: How to Adjust my SSH Server ? Almalinux 8
« on: January 22, 2025, 01:12:29 AM »
There are instructions ay the link for Rocky 9 and RHEL8.
So those will work on AlmaLinux 8 and 9.
But remember always crate a backup of the confg file, BEFORE making any changes.
Snapshots are even better.
firewall-cmd isn't used on CWP server, in fact it disables it for CSF/LFD.
So those will work on AlmaLinux 8 and 9.
But remember always crate a backup of the confg file, BEFORE making any changes.
Snapshots are even better.
firewall-cmd isn't used on CWP server, in fact it disables it for CSF/LFD.
229
PHP / Re: Anti-Change Log
« on: January 22, 2025, 12:27:48 AM »1. You just need to add the version number and nothing else.
2. For main php version (php switcher) modify the file:
/usr/local/cwpsrv/htdocs/resources/conf/el9/php_switcher/versions.ini
Trying this with 8.3.16, will also try with 8.4, and create that .ini from a copy of 8.3
230
PHP / Re: Anti-Change Log
« on: January 22, 2025, 12:22:45 AM »
Well PHP released on 2025-01-17:
8.4.3
8.3.16
Both of which have bug fixes/patches.
Thankfully no CVE's.
8.4.3
8.3.16
Both of which have bug fixes/patches.
Thankfully no CVE's.
231
CentOS-WebPanel Bugs / Re: abcdefg.php file server error 500
« on: January 21, 2025, 11:16:56 PM »
What version of PHP are you running?
232
CentOS-WebPanel Bugs / Re: abcdefg.php file server error 500
« on: January 21, 2025, 10:27:05 PM »
Try under User Accounts -> Fix Permissions -> (Check both boxes for Fix Permissions & Internal Server Error) then the blue bar.
233
Other / ELRepo throwing GPG Key error when trying to update
« on: January 14, 2025, 11:36:50 PM »
If you get the error
when trying to update from elrepo, run the following, and it will import the correct key to get rid of the error.
Quote
GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-elrepo.org (0xBAADAE52) is already installed
The GPG keys listed for the "ELRepo.org Community Enterprise Linux Kernel Repository - el9" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: kernel-lt-6.1.124-1.el9.elrepo.x86_64
when trying to update from elrepo, run the following, and it will import the correct key to get rid of the error.
Code: [Select]
rpm --import https://www.elrepo.org/RPM-GPG-KEY-v2-elrepo.org
234
Problems on other RedHat linux servers / Re: Clamav / AL 9
« on: January 14, 2025, 06:42:00 PM »
I posted a guide for AL 9 on this thread:
https://forum.centos-webpanel.com/apache/issues-with-brand-new-fresh-install-with-almalinux-9-4/
ClamAV needs to be installed BEFORE CWP to work correctly.
Then after you install CWP install spamassassin amavis.
https://forum.centos-webpanel.com/apache/issues-with-brand-new-fresh-install-with-almalinux-9-4/
ClamAV needs to be installed BEFORE CWP to work correctly.
Then after you install CWP install spamassassin amavis.
235
Apache / Re: Issues with brand new fresh install with almalinux 9.4
« on: January 14, 2025, 06:32:06 PM »
Yes, that AlphaGNU article work for AL 9, just follow the instructions for AL 8, and use dnf instead of yum.
236
Information / Re: Demo not work...
« on: January 13, 2025, 08:38:23 PM »
Tested also, and works OK.
238
Migration from other control panels / Re: CWP to CWP migration does not connect
« on: January 09, 2025, 05:42:21 AM »
Make sue Port 2304 is open as mentioned before.
Usually it's the firewall blocking a connection, if you have your whitelisted on both and that port open.
Temporarily disable CSF, and try to connect, if it does, then you've narrowed it down to the firewall.
Usually it's the firewall blocking a connection, if you have your whitelisted on both and that port open.
Temporarily disable CSF, and try to connect, if it does, then you've narrowed it down to the firewall.
239
Information / Re: Having Problems with DNS
« on: January 08, 2025, 04:11:34 PM »
Did you glue the DNS names at the registrar of the domain name?
http://www.webdnstools.com/dnstools/articles/glue_records
https://mxtoolbox.com/problem/dns/dns-bad-glue-detected
http://www.webdnstools.com/dnstools/articles/glue_records
https://mxtoolbox.com/problem/dns/dns-bad-glue-detected
240
Updates / Re: How to revert an update?
« on: January 08, 2025, 04:07:57 PM »
Also look at the PHP scripts, and change any references from '127.0.0.1' to 'localhost'
