problem in how cpanel handles ssl certificates

[cyberspirit]

Here is the problem:

Lets say the server is called host.domain.com and your website is www.domain.com
You have ssl certs for both names.
On your website you have a link to the cpanel login:

https://www.domain.com/cpanel

Internally the server calls a cgi script and forwards the request to https://host.domain.com:2083

This will result in the user seeing a warning that the SSL certificate does not match the host name.

The reason is that the user's webbrowser is presented the new SSL cert before it actually jumps to the new host name.
The reason is I think the cgi script creating this problem.

Perhaps someone can come up with a solution?

[nsdesign]

I'm having this exact same issue...
(see http://forums.cpanel.net/showthread....threadid=21393 )

Any fix on this yet?
Gary

[cyberspirit]

no, there is no fix for it because cpanel uses a cgi to redirect the request and the wrong certificate value is presented (the one with the initial URL) even though the certificate is correct.
it does not work because of how cpanel handles the redirect.