SSL: Error 12263 / ssl_error_rx_record_too_long

[dellio]

Hi, first post here hopefully somebody can help me out!

I'm trying to install a cert of the main domain that we use to provide hosting to our clients. I've installed the certificate and my cPanel is showing as:

Host Issuer Expire Date Functions
***.com

EssentialSSL

Dec 6 23:59:59 2008 GMT

Show Details Remove

But when I try to access https://***.com, or even just https://IP, depending which browser, I get thrown different errors. Namely "Error 12263" & "ssl_error_rx_record_too_long" & "Internet Explorer cannot display the webpage".

So I logged into WHM and tried to use the "Install a SSL Certificate and Setup the Domain" feature. All I did was type the domain in the domain field and everything auto-populated, press submit and receive the following:

Sorry, you must have a dedicated ip to use this feature!
SSL Install aborted due to error.

I then proceeded to check out httpd.conf, and did a search for 443. The only occurrence was in this:

<IfDefine SSL>
# Defined in /var/cpanel/cpanel.config: apache_ssl_port
Listen 0.0.0.0:443
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
</IfDefine>

Apache is installed with Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.8b

Now, would the only problem be that our domain is not on a dedicated IP, but on the Shared IP? If not what else could be throwing this error, any advice would be thoroughly appreciated. My main goal is to have SSL working on our domain which provides hosting, for when our clients go through our order form.

Also, after I get SSL set up on our main domain, isn't there a way to allow my clients to use our SSL cert should they not want to buy a dedicated IP or SSL cert? This is only a secondary objective, I'm mainly concerned with the first

[dellio]

Can't anyone explain this? I'm sure someone has used SSL on their cPanel servers, and might have some insight on this.

[daveformerlyof]

Can't anyone explain this? I'm sure someone has used SSL on their cPanel servers, and might have some insight on this.

SSL in Apache works on a per IP address basis. There is currently no way to install multiple SSL certs per IP address. This means that all sites on an IP when accessed by https will go to the one SSL cert. This causes many browser errors as the SSL cert domain will not match the domain.

To install SSL on the site, it needs to have a dedicated IP address.

You can force the install manually by editing httpd.conf but I can't provide specific information on that as we don't support such a setup. I'm sure a search on the web can turn something up though if you're inclined to go that route.

[delsol101]

What if you already have a dedicated IP and still get this error? What would cause this?

SSL in Apache works on a per IP address basis. There is currently no way to install multiple SSL certs per IP address. This means that all sites on an IP when accessed by https will go to the one SSL cert. This causes many browser errors as the SSL cert domain will not match the domain.

To install SSL on the site, it needs to have a dedicated IP address.

You can force the install manually by editing httpd.conf but I can't provide specific information on that as we don't support such a setup. I'm sure a search on the web can turn something up though if you're inclined to go that route.