This is my understanding of how easyapache distiller is supposed to work:


vi /usr/local/apache/conf/httpd.conf

make a change to that file wq

/usr/local/cpanel/bin/apache_conf_distiller --update --main

This process should take the changes I made to httpd.conf and save them in template files so that anytime httpd.conf is rebuilt for any reason my changes are brought back.

So far im finding this isnt always working for what i want to save, so distiller is likely loaded with little caveats i need to know about. For instance.

TraceEnable off

This doesnt like to stick around for very long. I made the change manually, ran distiller, and restarted apache. I know its in effect right now, but I also know in the last weeks it has managed to disappear from httpd.conf.

another one:

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP:+eNULL

this always manages to revert to

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

I'm not sure at what point it returns back to SSLv2, its usually in a few days, either we add a new account or something causes it to all recompile.



I know all these things come in from different templates at different points. Is distiller really able to write back to those templates, or are there only certain ones it can alter?