Godaddy UCC multiple Domain SSL and WHM

[hermes369]

1. Open your httpd.conf (/usr/local/apache/conf/httpd.conf) and copy the VirtualHost definition for your primary SSL VirtualHost to a text file. (You don't necessarily need to back it up, you're not going to change or save it.)
2. Edit the new file, copying the VirtualHost there for each other VirtualHost that you want to provide SSL for
- Change each reference to domain1.com to domain2.com, etc, EXCEPT for the references to the SSL certificate.
Leave those as they are, so you don't need to copy the certificate files anywhere else.
- Change the username and user group for the domain, the admin email address etc if necessary, etc.

Sorry for my noobishness; but, won't there be overlapping conf directives if one copies all of the stanzas from the default? Should one not just alter the existing httpd.conf file and run the distiller? Again, I apologize if I'm being ignorant.

[cPanelTristan]

You should not directly edit the httpd.conf file itself.for those VirtualHost directives. They are in /var/cpanel/userdata/username/domain.com or sub.domain.com location and should be edited there instead.

[hermes369]

Thanks for the quick followup. I've followed the instructions; but, I'm getting nowhere fast. The path mentioned in my httpd.conf file is included at the bottom of the default domain's ssl stanza:

# To customize this VirtualHost use an include file at the following location
# Include "/usr/local/apache/conf/userdata/ssl/2/nobody/mydomain1.com/*.conf"

Should I create

userdata/ssl/2/mydomain2/mydomain2.org/

directories and include it in the Include Editor in Post VirtualHost Config?

I have tried the instructions from post #14(I think it's 14) using Main >> Service Configuration >> Apache Configuration >> Include Editor >> Post VirtualHost Config but I still get directed to the "Default Web Site Page".

I appreciate your help. Thanks!

[LRM67]

duplicate post

[LRM67]

This is a second attempt to add this post- it didn't show up the first time. So if it turns up twice, sorry - I'll delete one.

This just isn't working for me... hopefully someone can see why or give me further instructions.
My situation:
I have a main domain and two addon domains set up under one cPanel user and one dedicated IP.
I have a UCC from godaddy with the main domain as the first name and containing the other two domains (and some others I intend on moving over at later dates). The certificate is installed and works for the main domain - domain1.com.

I attempted to get domain2.com https accessible by following the instructions from post #12: copying, renaming and editing the files as mentioned there. Rebuilt and restarted. The followed the instructions from post #14 to add it as an vhost include and restarted Apache.

It seemed to have worked but then I found domain1.com was now redirected to domain2.com when trying to access it with https.

Next I went through all the steps a second time for domain3.com... the restart now threw a warning

 [warn] VirtualHost ##.##.##.##:443 overlaps with VirtualHost ##.##.##.##:443, the first has precedence, perhaps you need a NameVirtualHost directive

When I tested I found that domain1.com and domain3.com both redirect to domain2.com when accessed as https...
I reset everything back to the way it was initially and tried again with the same results.

So now I'm stuck and don't know if I understood the setup or changes incorrectly or just messed up somewhere. I've been at this (including searching and research) for days now and I'm getting really frustrated over something that looks like it should be fairly straightforward.

[clk320]

3) install the certificate using the "Install a SSL Certificate and Setup the Domain" tab in WHM. Paste in the certificate. WHM will auto fill the domain and user. Change the domain to www.domain1.com if not already set to that. Change the user to nobody, the IP address should be correctly set to the IP address of domain1.com.

What are the security implications of changing the user to nobody?

Thanks

[MRaburn]

I had read over this and attempted this, and all the while had wondered about using the same IP as some instructions had typed, it may have been in error. As I understand is Apache requires a unique IP per port 443 instance.

I went through these solutions and found that I would get errors unless each domain was on a seperate IP. So make sure you do this and it should work.

Some of the instructions said use same ip as domain1 for domain2, don't do this and all should work.

Each domain needs its OWN IP.

So when modifying the VIRTUAL HOST reqs be sure to change the IP as well to where the main non SSL domain is sitting, making sure it is on its own IP.

[rezman]

I had read over this and attempted this, and all the while had wondered about using the same IP as some instructions had typed, it may have been in error. As I understand is Apache requires a unique IP per port 443 instance.

I went through these solutions and found that I would get errors unless each domain was on a seperate IP. So make sure you do this and it should work.

Some of the instructions said use same ip as domain1 for domain2, don't do this and all should work.

Each domain needs its OWN IP.

So when modifying the VIRTUAL HOST reqs be sure to change the IP as well to where the main non SSL domain is sitting, making sure it is on its own IP.

Few problems with this..

1. WHM only allows you to assign an IP to a Cpanel account, not a domain. If you have several addon domains added to the same Cpanel account then they all get the same IP address.

2. If you manually try to change the IP by editing configs then you risk those being reverted back by Cpanel rebuilding the configs OR if you have several people managing the Cpanel server, one of them might try to assign one of the IPs you manually set on Cpanel account A to some other account. Again rebuilding configs and breaking things.

I hope at some point Cpanel will allow you to assign an IP to a domain and not just an entire account.

[Matthew271]

I followed these instructions. The code is listed below for my example2.com domain (Virtual Host Definition). Although Internet Explorer 9 still gives me a warning when I go to the site. What did I do wrong?

<VirtualHost 50.63.116.135:443>
    ServerName a2bbrokers.com
    ServerAlias a2bbrokers.com
    DocumentRoot /home/umtdirec/public_html
    ServerAdmin webmaster@domain.com
    UseCanonicalName Off
    CustomLog /usr/local/apache/domlogs/umtdirect.com combined
    CustomLog /usr/local/apache/domlogs/umtdirect.com-bytes_log "%{%s}t %I .\n%{%s}t %O ."
    ## User umtdirec # Needed for Cpanel::ApacheConf
    <IfModule mod_suphp.c>
        suPHP_UserGroup umtdirec umtdirec
    </IfModule>
    <IfModule !mod_disable_suexec.c>
        <IfModule !mod_ruid2.c>
            SuexecUserGroup umtdirec umtdirec
        </IfModule>
    </IfModule>
    <IfModule mod_ruid2.c>
        RUidGid umtdirec umtdirec
    </IfModule>
    ScriptAlias /cgi-bin/ /home/umtdirec/public_html/cgi-bin/
    SSLEngine on

    SSLCertificateFile /etc/ssl/certs/www.umtdirect.com.crt
    SSLCertificateKeyFile /etc/ssl/private/www.umtdirect.com.key
        SSLCACertificateFile /etc/ssl/certs/www.umtdirect.com.cabundle
    CustomLog /usr/local/apache/domlogs/umtdirect.com-ssl_log combined
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
    <Directory "/home/umtdirec/public_html/cgi-bin">
        SSLOptions +StdEnvVars
    </Directory>

    # To customize this VirtualHost use an include file at the following location
    # Include "/usr/local/apache/conf/userdata/ssl/2/umtdirec/umtdirect.com/*.conf"

</VirtualHost>

[cPanelTristan]

Is the domain a2bbrokers.com actually at /home/umtdirec/public_html location? If not, revise the /var/cpanel/userdata/username/a2bbrokers.com_SSL file to be the right paths for that domain for every instance where it has the umtdirec user.

Next, review the /var/cpanel/userdata/username/a2bbrokers.com_SSL file to have the /etc/ssl/private and /etc/ssl/certs listed as the domain it is. This is a UCC certificate, so it needs to point the domain name for the certificate (these should have been copied from the original /http://www.umtdirect.com files for the cert following the prior post about how to install these).

[Matthew271]

The original crt bundle domain name is umtdirect.com, and a2bbrokers is the alt domain. I have them installed. They do point to the same directory. They are also on the same IP address. I changed ServerName and ServerAlias to the a2bbrokers.com which is example2.com for the virtual host directory include file. Am I suppose to change anything else, because it still gives me a certificate error when I go to a2bbrokers.com?

[cPanelTristan]

Yes, you need to change /var/cpanel/userdata/umtdirec/a2bbrokers.com_SSL to have the /etc/ssl/certs and /etc/ssl/private paths point to the a2bbrokers.com domain rather than the umtdirect.com domain as I stated in my second paragraph above. The information you posted shows it is pointing to the other domain. You need it to be pointing to the certs for this domain.

So basically, look for any instances in /var/cpanel/userdata/umtdirec/a2bbrokers.com_SSL of umtdirect.com and change every instance to a2bbrokers.com

[Matthew271]

This might be a dumb question, but how do I access /var/cpanel/userdata/umtdirec/a2bbrokers.com_SSL through Putty so I can make the necessary changes?

[Matthew271]

When I edit /var/cpanel/userdata/umtdirec/a2bbrokers_SSL and change umtdirect.com to a2bbrokers.com I get this error in WHM. An error occurred while running: /usr/local/apache/bin/httpd -DSSL -t -f /usr/local/apache/conf/httpd.conf Exit signal was: 0 Exit value was: 1 Output was: --- Syntax error on line 24 of /usr/local/apache/conf/includes/post_virtualhost_2.conf: SSLCertificateFile: file '/etc/ssl/certs/www.a2bbrokers.com.crt' does not exist or is empty --- Please Help. What am I doing wrong here?

[cPanelTristan]

Did you copy the certificate for /etc/ssl/certs/www.umtdirect.com.crt to /etc/ssl/certs/www.a2bbrokers.com.crt as was instructed in my post on the prior page to do for the guide? I even mentioned it again on this page.

(these should have been copied from the original www.umtdirect.com files for the cert following the prior post about how to install these)

If you are going to have paths to an SSL certificate, the paths must be correct for a certificate that exists. You need to copy the certificate to match the domain name. All you have to do is this:

cp /etc/ssl/certs/www.umtdirect.com.crt /etc/ssl/certs/www.a2bbrokers.com.crt
cp /etc/ssl/certs/www.umtdirect.com.cabundle /etc/ssl/certs/www.a2bbrokers.com.cabundle
cp /etc/ssl/private/www.umtdirect.com.key /etc/ssl/private/www.a2bbrokers.com.key