Ssl

[B12Org]

When I install a SSL cert for a domain (self signed), it works fine. However, when I install another one for a new domain, it takes me to the first one. So I now have two https domains, that point to the same one, and I do not know why. When I removed the first one, the second one works fine.

cPanel.net Support Ticket Number:

[pagedeveloping]

Do you have these domains on their own IP's?

I had this happened to me one time and reallized they where running on the same IP.

cPanel.net Support Ticket Number:

[B12Org]

No, they are all shared. Do they need to be on seperate IPs

cPanel.net Support Ticket Number:

[pagedeveloping]

yup! each domain that requires it's own ssl needs to be on a dedicated IP.

cPanel.net Support Ticket Number:

[B12Org]

well that sux

cPanel.net Support Ticket Number:

[Robert_]

Im pretty sure you can just use an internal Ip. If that was your concern.

cPanel.net Support Ticket Number:

[B12Org]

How would I use a private IP, if I dont have any assigned to me, or could I just set it up some how without buying internal IPs?

cPanel.net Support Ticket Number:

[pagedeveloping]

You could use the alternative by letting your clients use your ssl like https://www.yoursite.com/~username providing you have ssl for your domain.

cPanel.net Support Ticket Number:

[Robert_]

I only have one cert installed on my server but Im pretty sure it will work. Just go to the ip functions area and add an ip like 192.168.0.12 you may need to click on the rebuild ip pool and then go to change sites ip and that should be it.

cPanel.net Support Ticket Number:

[B12Org]

Will it let me do that? If I do that, Do I need to manually edit dns zones and httpd.conf, and named.conf and all that good stuff?

cPanel.net Support Ticket Number:

[Robert_]

I guess I forgot - brain damage

I have done this before. I assigned an internal ip to the site. I also set aside a couple internet accessable ip's for use by resellers and for people wanting an ssl cert. Maybe there is another way to do this but this is the way I did it. You can register multiple domains as nameservers with the same ip's the reason I used a couple of different ip's is because if someone did a ns lookup the other nameserver wouldnt show up. You can probably do it with you ns1 and ns2 ip's if you want.

I registered mydomain1.com's nameserver using the ip's I set aside ie ns1.mydomain1.com etc.

then I changed mydomain1.com's to its own nameservers instead of mine ie ns1.myhostsite.com to ns1.mydomain1.com and ns1 etc.

Then I edited the dns zone appropriately.


You dont have to use additional web accessable ip's if you dont want to but I would recommend it.

I hope the above made sense. Its been a while since I did the above but it did work, for me at least.

cPanel.net Support Ticket Number:

[B12Org]

Originally posted by Robert_
I guess I forgot - brain damage

I have done this before. I assigned an internal ip to the site. I also set aside a couple internet accessable ip's for use by resellers and for people wanting an ssl cert. Maybe there is another way to do this but this is the way I did it. You can register multiple domains as nameservers with the same ip's the reason I used a couple of different ip's is because if someone did a ns lookup the other nameserver wouldnt show up. You can probably do it with you ns1 and ns2 ip's if you want.

I registered mydomain1.com's nameserver using the ip's I set aside ie ns1.mydomain1.com etc.

then I changed mydomain1.com's to its own nameservers instead of mine ie ns1.myhostsite.com to ns1.mydomain1.com and ns1 etc.

Then I edited the dns zone appropriately.


You dont have to use additional web accessable ip's if you dont want to but I would recommend it.

I hope the above made sense. Its been a while since I did the above but it did work, for me at least.

cPanel.net Support Ticket Number:

Well, I tried adding an internal IP, and setup the a user with it in ssl in whm. I can access the site fine through http but not https, although there is no home page. Would that matter, or would it just give the directory listing. Also, how can I make it so a site ONLY works from ssl?

cPanel.net Support Ticket Number:

[Robert_]

I dont think it matters that there is no index page.


require ssl

read this http://www.apache-ssl.org/docs.html#SSLRequireSSL

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

[B12Org]

So, if I edit httpd.conf and put:

<Directory /some/where/important>
SSLRequireSSL
</Directory>


udner one of the users, that users domain will only take ssl?

cPanel.net Support Ticket Number:

[pagedeveloping]

If you have ssl cert installed on your main account whether it be the server root or if you are a reseller you can only use the cert for what ever account you purchased it for.

correct me if I am wrong here:
You can't just go and add an IP to your list unless you have purhcased it from your NOC or whom ever you have purchased or leased the server from.

To make things simple:
If you have not any extra IP's than you need to purchase them and have them added.

In the mean time you can take my first suggestion and use your main address again providing you have ssl cert. installed
https://www.yoursite.com/~clientusername/

It will allow your clients to access through ssl thus calling this shared ssl.

cPanel.net Support Ticket Number: