Question about Health Status Summary and cURL TLS 1.1 and 1.2

[Wabun]

Hi All,

 

When checking the Health Status summary it comes up with the following message in section: Secure TLS Support in cURL

 

cURL reports that it does not support Secure TLS 1.1 and 1.2.

Make sure an SSL library that support TLS 1.1 and 1.2 is installed and supported by cURL.

 

I am using cPanel WHM56 build 28 and under the cPanel Web Services Configuration it shows:

 

TLS/SSL Cipher List: ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

 

TLS/SSL Protocols: SSLv23:!SSLv2:!SSLv3

 

So what is missing or wrong?

 

This is a default cPanel installation, PHP is compiled with CurlSSL.

 

Any help much appreciated.

[twhiting9275]

This is something you'll have to address with your systems administrator, it's not something WHMCS is going to be able to assist you with.

What OS are you running? What version?

It's important to get those two issues cleared up, obviously, because, if you don't, you'll shortly lose access to Paypal, etc. That's why this notification is in there.

[Wabun]

Hi,

 

OS is CentOS v6.8, and all works fine, hence my question.

 

# openssl s_client -connect domain.com:443 -tls1_2

 

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

SSL-Session:

Protocol : TLSv1.2

Cipher : ECDHE-RSA-AES256-GCM-SHA384

 

Also Health Status is green with: Installed cURL Version

You currently have version 7.38.0 of cURL installed. This version uses a secure cipher list.

Edited August 2, 2016 by Wabun
Health Status is green

[twhiting9275]

That's all well and good, but it doesn't mean that's built into curl. Like I said, you need to work with your systems administrator to hash that out.

If curl is setup properly, WHMCS won't show that message.

[Wabun]

Hi,

 

When I do a test with http://www.ssllabs.com my website shows the TLS1.2 in green and seems fine.

 

I can't find out more.

Edited August 3, 2016 by Wabun