sw-cp-server is actually a custom compiled version of nginx.
While we are encouraged to increase the security of our SSL-connection with the outside world it becomes hard on some systems to apply these as well on the PSA-interface.
I can't use this directive on my 1-year old Ubuntu 14.04 although my 6-year old CentOS 5.11 has no problem with that.
On the Ubuntu 14 system I need to use (a modern CentOS 7.3 has the same)
While nginx is reasonably modern on most systems it becomes quite unpredictable when it comes to sw-cp-serverd.
Can you consolidate these versions in your psa-distributions???
Note the OpenSSL 1.01e of 11 Feb 2013 on the most modern CentOS-version
Here are some examples:
Onyx 17.5.3 CentOS 7.3.1611
sw-cp-serverd -V 2>&1 | head -n3
Plesk 12.5 CentOS 5.11
sw-cp-serverd -V 2>&1 | head -n3
nginx -V 2>&1 | head -n3
Onyx 17.5.3 Ubuntu 14.04.5 LTS
sw-cp-serverd -V 2>&1 | head -n3
nginx -V 2>&1 | head -n3
Onyx 17.5.3 Ubuntu 16.04.3 LTS
sw-cp-serverd -V 2>&1 | head -n3
nginx -V 2>&1 | head -n3
While we are encouraged to increase the security of our SSL-connection with the outside world it becomes hard on some systems to apply these as well on the PSA-interface.
I can't use this directive on my 1-year old Ubuntu 14.04 although my 6-year old CentOS 5.11 has no problem with that.
Code:
ssl_ecdh_curve secp521r1:secp384r1:prime256v1;
On the Ubuntu 14 system I need to use (a modern CentOS 7.3 has the same)
Code:
ssl_ecdh_curve prime256v1;
While nginx is reasonably modern on most systems it becomes quite unpredictable when it comes to sw-cp-serverd.
Can you consolidate these versions in your psa-distributions???
Note the OpenSSL 1.01e of 11 Feb 2013 on the most modern CentOS-version
Here are some examples:
Onyx 17.5.3 CentOS 7.3.1611
sw-cp-serverd -V 2>&1 | head -n3
Code:
nginx version: nginx/1.11.10
built with OpenSSL 1.0.1e-fips 11 Feb 2013
TLS SNI support enabled
Plesk 12.5 CentOS 5.11
sw-cp-serverd -V 2>&1 | head -n3
Code:
nginx version: nginx/1.9.2
built with OpenSSL 1.0.1p 9 Jul 2015
TLS SNI support enabled
Code:
nginx version: nginx/1.11.1
built with OpenSSL 1.0.2k 26 Jan 2017
TLS SNI support enabled
Onyx 17.5.3 Ubuntu 14.04.5 LTS
sw-cp-serverd -V 2>&1 | head -n3
Code:
nginx version: nginx/1.11.10
built with OpenSSL 1.0.1f 6 Jan 2014
TLS SNI support enabled
Code:
nginx version: nginx/1.11.10
built with OpenSSL 1.0.2k 26 Jan 2017
TLS SNI support enabled
Onyx 17.5.3 Ubuntu 16.04.3 LTS
sw-cp-serverd -V 2>&1 | head -n3
Code:
nginx version: nginx/1.11.10
built with OpenSSL 1.0.2g 1 Mar 2016
TLS SNI support enabled
Code:
nginx version: nginx/1.11.10
built with OpenSSL 1.0.2g 1 Mar 2016
TLS SNI support enabled
Last edited: