ssl

  1. T

    Need to temporarily enable TLSv1

    I need to enable TLSv1 and TLSv1.1 on our server temporarily, for one of our apps that requires it still, for now. However, cPanel is no longer allowing that the "standard way". Editing the values in httpd.conf do not seem to do anything. How should I proceed? Thanks!
  2. N

    SAN SSL Certificates

    Hi, I've got a web app that I want to white label. In order to provide a white label solution, I will require a SAN (Subject Alternate Name) SSL certifcate, of which the list of SAN's can be updated programmatically & dynamically. Example: 1. My app domain is app.domain.com 2. User wants his...
  3. psytanium

    Generate and install free SSL on a Centos VPS

    Hi, I have a Godaddy SSL certificate installed for 4 years now, but about to expire soon and I have to renew it, but looking for a way to save the SSL cert price and install a free certificate on my Centos VPS server. What do you recommend ? Where to start ? Let's Encrypt or the default CPanel...
  4. M

    Remove Sectigo auto ssl from whm

    Hello : Happy New year ! How is it possible Remove Sectigo auto ssl from whm ? Thanks
  5. M

    SSL error after last WHM update (92.0.6)

    Hi, After the last WHM/cPanel update (92.0.6) I'm receiving this error each time that AutoSSL (Let's Encrypt) renew the SSL: domain.com: AutoSSL certificate installed! AutoSSL has renewed “domain.com”’s Domain Validated (DV) SSL certificate. The new certificate lacks 7 of the website’s...
  6. N

    NEED ADVICE: Make Primary Subdomain for the Main domain (The SSL certificate)

    Hello, i have a Dilemma. I work with Nginx and even apache today work on a virtual host ( Reverse Proxy ) i have my mine domain with him i open the account: locksmithunit.com now this domain did not come with a subdomain, but my other sites come with a subdomain in the SSL certificate...
  7. M

    certmonger needs restarting

    I wasn't sure which section of the forum I should post this in, but... One of my servers shows that something to do with certmonger needs restarting: [~]# /usr/bin/needs-restarting 6220 : /usr/sbin/certmonger-S-p/var/run/certmonger.pid 5660 : /usr/bin/python/usr/sbin/tuned-d-c/etc/tuned.conf...
  8. H

    SOLVED RE-UPDATE SSL cPanel FOR HOSTNAME SERVER

    Hello team and everyone, I'm system admin in Vietnam. I just migrate all accounts from old server named h1.mydomain.com.vn to the new server named test.h1.mydomain.com.vn. The domain test.h1.mydomain.com own its cPanel SSL. So I need to change the hostname on new server to h1.mydomain.com.vn...
  9. Michael-Inet

    How to get an SSL Client Certificate for the same Addon Domain on 2 different cPanel servers?

    Background: For Server {servernameA.com} and Addon Domain {example.com} cPanel issues SSL Client Certificates in the form of: Common Name: example.servernameA.com Containing: example.com mail.example.com www.example.com example.servernameA.com...
  10. U

    Configuring Apache web server to use Lets Encrypt wildcard SSL

    Hello! I was installed and configure everythink, could you help me with add sertificate on httpd.conf Where I need add this cert in httpd.conf ? SSLCertificateFile /etc/letsencrypt/live/domen.tld/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/domen.tld/privkey.pem...
  11. A

    SOLVED Manage SSL Services via WHM

    Hello, I have self-signed SSL certificates on my cPanel/WHM services. Do I need to wait for the cPanel maintenance to run so the server can order a replacement certificate? If so, when does the maintenance script usually run (how often)? Also, can I run the script via the terminal before the...
  12. R

    SOLVED SSL Duration?!

    I need to renew a 2-year EV SSL certificate but upon trying to do so via the UI, there's no option to specify the SSL duration (i.e. 2 years), nor does the UI or even the documentation say what the duration will be when the order completes. It's really unhelpful and very frustrating that...
  13. I

    SOLVED Unable to generate free service SSL for server hostname

    Hi cPanel requested the SSL service certificate before I had a valid CAA record in place. Now I'm not sure which CAA record is valid, is it 0 issue "comodoca.com" or 0 issue "sectigo.com"? I've ran /usr/local/cpanel/bin/checkallsslcerts multiple times over last few days with no success. The...
  14. L

    Preferred Method of Changing SSLSessionCache SHMCB cache size

    There is an apache config variable called SSLSessionCache: https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslsessioncache The typical format is: shmcb:/path/to/datafile[(size)] I run a very high-traffic server (~1000 page views / second) and I believe that increasing the SHMCB cache...
  15. R

    FTP Subdomain SSL

    Hi, If I try to connect to the ftp.website.com subdomains via FTP I get warnings thrown about the "Hostname not matching the certificate." becacause the SSL certificate is for the main WHM server, not the subdomain. How do I get certificates applied to the ftp subdomain so that a user can...
  16. E

    How to hide the "Purchase and Install an SSL Certificate" link in reseller's WHM?

    Hello, I have disabled the reseller privilege in WHM for " Account Management --> Purchase SSL Certificates (ssl-buy)". However, our resellers are still able to see the "Purchase and install an SSL Certificate" link in their WHM menu. How can we disable this link? we sell SSL certificates...
  17. M

    issue at letsencrypt SSL

    Hello when i run this command: cd /root/.acme.sh/ ./acme.sh --issue -d rabo-wereldpas.domain.com -w /usr/local/lsws/DEFAULT/html/ i see below error (screenshot: Screenshot ) : rabo-wereldpas.domain.com:Verify error:Invalid response from...
  18. albatroz

    SSL certificate renewal requires a new CSR file?

    Hello, I need to renew some SSL certificates from COMODO and was wondering if I can reuse the previous CSR files I used to generate the original certificates or if I will need to create a new set of them
  19. Spirogg

    just incase anyone having issues with auto SSL Currently, there are some known issues with Sectigo's certificate Issuing platform.

    Currently, there are some known issues with Sectigo's certificate Issuing platform. They have updates posted to their status page here: https://sectigo.status.io/ Once this is resolved the certificate(s) should be issued. this is an issue for me right now as well 9-30-2020 at 3.34am CST so...
  20. imorandin

    Disable cprapid hostname on setup

    Hi, In cPanel v90 there is a new feature that automatically sets a hostname ending in .cprapid.com to the server so it can issue a SSL for it: Automatically-Issued Hostnames | cPanel & WHM Documentation. We use automated cpanel deployment and this behavior breaks some things for us, not to...