The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

about to selfSSL

Discussion in 'General Discussion' started by kiwiroll, Sep 18, 2008.

  1. kiwiroll

    kiwiroll Member

    Joined:
    Jun 5, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Japan
    Installing SSL Certificate

    Sorry, you must have a dedicated ip to use this feature for the user: xxxxx!
    If you are intending to install a shared certificate you must use the username "nobody" for security and bandwidth reporting reasons.
    SSL Install aborted due to error.


    WHM 11.23.2 cPanel 11.23.6-S27225


    1. Generate a SSL Certificate and Signing Request
    2. I put the .csr file of the subdomain that I prepared into Install a SSL Certificate and Setup the Domain with 1

    An upper error was displayed.

    Please help me.
     
  2. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Does this cPanel account have a dedicated IP address?
     
  3. kiwiroll

    kiwiroll Member

    Joined:
    Jun 5, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Japan
    cPanel account becomes main shared ip.

    May not you do it?
     
  4. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    An account typically needs a dedicated IP address to be able to have a SSL certificate.
     
  5. kiwiroll

    kiwiroll Member

    Joined:
    Jun 5, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Japan
    ssl does not install it in other cPanel accounts.
    I want to update ssl which I have already installed.

    But an above error is displayed.

    why?
     
  6. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Please clarify what you mean by this. Are these self-signed SSL certificates or signed SSL certificates you have purchased. Or are you talking about upgrading the OpenSSL software itself?

    As the message states, SSL certificates must be installed on accounts with dedicated IP addresses. This is because SSL certificates are issued to specific IP addresses. You cannot have multiple SSL certificates on a single IP address, therefore installing a SSL certificate to an account using a shared IP address is unacceptable.
     
  7. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,461
    Likes Received:
    22
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Prior versions of the SSL Installer were buggy and would allow installing certificates for accounts that did not have a dedicated IP Address.

    This (along with other bugs) were fixed in 11.23.6.
     
  8. docbreed

    docbreed Well-Known Member

    Joined:
    Jul 18, 2005
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Can you explain what does a SSL ticket has to do with security and bandwidth reporting reasons? Is there any explainations to manually insert this ticket since whm will not work as it did in the past.
     
  9. docbreed

    docbreed Well-Known Member

    Joined:
    Jul 18, 2005
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    maybe im thinking wrong ... But 1 ssl ticket per ip... reguardless how many domains are under that ip.. so what about subdomains under the same ip that needs that ssl ticket?

    Our hosting services is down for expired ssl ticket right now. this is not a shared ticket and has worked in past for sometime.
     
  10. DaveUsedToWorkHere

    DaveUsedToWorkHere Well-Known Member

    Joined:
    Dec 28, 2001
    Messages:
    689
    Likes Received:
    1
    Trophy Points:
    18
    You'll need to purchase a wildcard SSL certificate if you wish to use the certificate with subdomains. A SSL cert is only good for the domain listed on the cert. For example: If you have a cert for www.daveshosting.com and you use it on secure.daveshosting.com, anyone who goes to secure.daveshosting.com will get a SSL cert mismatch error.

    If you wish to install an SSL cert for the server's shared IP, we recommend purchasing a cert for the server hostname. When you go to install the cert in WHM, enter the hostname and enter 'nobody' as the user.
     
  11. docbreed

    docbreed Well-Known Member

    Joined:
    Jul 18, 2005
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Hmm. I'll try to explain what i have right now.

    10.10.10.10 ip
    >domain1
    >domain1 has a ssl ticket just for its domain

    but i have many other domains including sub domain to this domain1 under the same ip.. I also wish not to include these other domains and sub domains in any ssl ticket environment. And yet i cannot install that ticket to domain1. All i want is domain1 to have a ssl ticket and nothing else.

    --Jeremy
     
  12. DaveUsedToWorkHere

    DaveUsedToWorkHere Well-Known Member

    Joined:
    Dec 28, 2001
    Messages:
    689
    Likes Received:
    1
    Trophy Points:
    18
    While this is not recommended, you can type in the user 'nobody' to force a SSL cert to be installed on a shared ip.

    Choose the domain you wish to install the cert for and then manually type in 'nobody' in the user field.

    Note: All other domains on the same IP will use this SSL cert when going to https://thatdomain.com in a browser. This is because Apache only handles one SSL certificate per IP and therefore all domains on the IP will have their HTTPS traffic redirected to that SSL certificate.
     

Share This Page