| NOTE
: ASSP SSL is still causing
problems ( exim timeouts ) in some server , even if using ASSP Mode 1
with exim TLS disabled and even if you are using latest ASSP 1.5.1.2 (1.2.0) .
At this time there is still no valid turnaround to this problem, avoid to use it on
production servers.
For this reason if you would use ASSP with SSL without problems in
production servers, use instead the SSL stunneling solution which is
described here . If you would test ASSP SSL
(at your risk) you may follow the instructions below. |
ASSP 1.5.1
(1.5.1.2 recommended) and above versions supports SSL natively
;
Requirements
ASSP WHM 4.6.0 or above
ASSP Deluxe 3.4.5 or above
ASSP 1.5.1 or above
Before enabling ASSP SSL open your
ASSP WHM interface and click
Update ASSP Perl modules
If you are already using SSL stunnel , it will be
automatically disabled.
ASSP SSL can be installed in 2 ways
1 )
MODE 1 : ASSP SSL 465
(recommended)
If you would use this way, open your ASSP WHM , go down to ASSP Deluxe
for cPanel Advanced tools > and click ASSP SSL . Choose
your certificate and enable it. Now click "DISABLE EXIM TLS" and you have
finished. Your clients will be able to send email using SSL 465 and ASSP
will accept incoming 465 SSL connections.
2 )
MODE 2 : ASSP SSL 465 <==negotiation==> EXIM TLS 1465
If you would use this way (ASSP
SSL 465 <==negotiation==> EXIM TLS 1465) you should allow port 1465 on your firewall
(TCP IN/OUT) .
Now open
your ASSP WHM , go down to ASSP Deluxe
for cPanel Advanced tools > and click ASSP SSL .
Choose your certificate and enable it. Your clients will be able to send email
using SSL 465 and ASSP will accept 465 SSL connections. ASSP will negotiate with
EXIM on port 1465 . This usage is still not recommended because you may
receive some TLS error. If you receive several TLS errors click
on "DISABLE EXIM TLS"
to switch to MODE 1 described above
.
NOTE :
to reduce problems with TLS errors you need to compile from source
latest OpenSSL 0.9.8e (or above) even if it's NOT recommended at all
since this action could mess up your easyapache , php curl , and openssh . I
recommend to try this usage (MODE 2) only when your OS will provide by default
OpenSSL 0.9.8e (or above) .
How to monitor ASSP SSL
You can monitor SSL adding
check_ssl=yes to
your status.php
cronjob. i.e.
*/2 * * * *
/usr/local/cpanel/3rdparty/bin/php-cgi /usr/local/assp/deluxe/status.php
check_ssl=yes