VZPP - has to be secure?

**jez9999** · 04-23-2006, 07:52 AM

Hi, I notice that the URL given to me to connect to Virtuozzo Power Panel when I signed up ended with the port 4643, and was a SSL connection.

Is there a port you can use to connect to VZPP on a regular unencrypted HTTP connection or does it have to use that encrypted port?

Remember that you can indeed connect to cPanel, WHM on both unsecure and secure ports.

**Andre** · 04-23-2006, 10:10 AM

Hi Jez,

It's not possible to connect to it without SSL, and it also wouldn't be smart to do so since you're sending the root password over that connection in order to login.

**PaulStuffins** · 04-23-2006, 11:09 AM

Andre,

Would it be possable to get a SSL Cert to cover the domain? This way when clients go to www.domain.com:4643 they dont get the box they get at the moment.

And if so how would it be applied?

Paul

**jez9999** · 04-23-2006, 01:46 PM

Originally Posted by Andre

Hi Jez,

It's not possible to connect to it without SSL, and it also wouldn't be smart to do so since you're sending the root password over that connection in order to login.

Well, you're doing that when you connect to WHM and you can do that unsecurely...

**Andre** · 04-23-2006, 01:48 PM

Originally Posted by jez9999

Well, you're doing that when you connect to WHM and you can do that unsecurely...

You can, but you shouldn't. However with the power panel it's not possible.

**Andre** · 04-23-2006, 01:55 PM

Originally Posted by PaulStuffins

Andre,

Would it be possable to get a SSL Cert to cover the domain? This way when clients go to www.domain.com:4643 they dont get the box they get at the moment.

And if so how would it be applied?

Paul

I think this should be possible, however it wouldn't really serve a purpose becuase usually only you would login to the power panel yourself and not your clients.

**PaulStuffins** · 04-23-2006, 01:57 PM

Jez,

Maybe that is a flaw in the way cPanel have implemented WHM.

I myself dont use cPanel so I can not comment but if you use Plesk if you tried to connect to the Control Panel using HTTP your request is forwarded to the HTTPS. Which is the same as on the VZPP.

I would look at using cPanel if cPanel Inc cleaned up the backend so it did not use so many resources and started to really think about security.

Paul

**Andre** · 04-23-2006, 02:02 PM

Paul,

It is possible to login to WHM with SSL, but there's also a way to login without it.

Port 2082: cPanel without SSL
Port 2083: cPanel with SSL
Port 2086: WHM without SSL
Port 2087: WHM with SSL
Port 2095: Webmail without SSL
Port 2096: Webmail with SSL

**PaulStuffins** · 04-23-2006, 02:06 PM

Andre,

I did not know that. But then not using cPanel I have not really researched into the ports.

Would there be a way of closing the non secure ports that cPanel uses?

Paul

**Andre** · 04-23-2006, 02:13 PM

Yes that can be done using a firewall such as APF.

By default http://ip.address/cpanel also redirects to the 2082 port, but it's also possible to change this in WHM to use 2083 instead.

**PaulStuffins** · 04-23-2006, 02:23 PM

I think this should be possible, however it wouldn't really serve a purpose becuase usually only you would login to the power panel yourself and not your clients.

I meant to use the Plesk port number. I guess you could also do the same for cPanel so that our clients dont see the the SSL warning when they connect to the control panel.

Paul

**Andre** · 04-23-2006, 02:33 PM

With both Plesk and cPanel that is possible (they are two completely different procedures though).

With Plesk you are able to change this by changing the default certificate, however if you have a Plesk VPS and it doesn't work you may need to contact support because in some cases the 8443 port is being intercepted from the node and in that case our staff has to set up the certificate on the node for you. However I would recommend to first try changing the default certificate in Plesk.

With cPanel the way to do this would be by logging in to WHM and then go to "Change Server Certificates"

**jez9999** · 04-23-2006, 02:44 PM

Ah, which reminds me Andre...

On my server, this gives an internal server error: http://game-point.net/cpanel
as well as http://game-point.net/webmail

Any ideas why? :-)

**Andre** · 04-23-2006, 04:13 PM

It may have to do with certain settings in WHM but we'd have to take a look inside your VPS to give a definite answer to that. It would be best if you could open a support ticket about this.

**bubazoo** · 05-14-2006, 03:53 AM

mine doesn't use

XX.XX.XX.XX/cpanel

mine forces me to use 2083

same with XX.XX.XX.XX/whm

won't work either, forces me to use that port

how do I change that so I don't have to remember each port for each panel?

LinkBack

Thread Tools

Display

VZPP - has to be secure?

Bookmarks

Bookmarks

Posting Permissions