SOLVED AutoSSL certificate expiry -delete webdisk and mail

[DumpsterDiver]

Hi,

I have recently activated SSL on my WordPress site and am now receiving the expiry email below. Currently I am not using Webdisk or mail. I have a VPS and very limited server knowledge. After speaking to GoDaddy, they said I could dismiss the warning or delete webdisk.

Is this the correct thing to do and if so, how do you delete it (I don't see either under subdomains, but do see the webdiskfolder) I'm having no luck searching the web.

Also, will the certificate auto renew after they are deleted? EX:

webdisk.example.com does not resolve to any IPv4 addresses on the internet.

According to Cpanel documentation, "You cannot delete this Web Disk account". Does anyone know of a work around?

 

[cPanelMichael]

Hello,

You can actually exclude domain names or subdomains that you don't utilize via the SSL TLS Status option in cPanel:

SSL TLS Status - Version 70 Documentation - cPanel Documentation

Let us know if this helps.

Thank you.

 

[DumpsterDiver]

Michael,

Thank you!! I think that is exactly what I was looking for! I excluded the two. The AutoSSL is in progress and spinning. I will let you know if it works.

Along the same lines, I created a subdomain store.example.com that is forwarded to a separate url on the same site. Should I exclude it until the subdomain is live or just delete the subdomain until ready to go live?

I haven't received a warning email yet, but did notice this error.
An error occurred the last time AutoSSL ran, on February 23, 2018:
“store.example.com” does not resolve to any IPv4 addresses on the internet.

 

[cPanelMichael]

Along the same lines, I created a subdomain store.example.com that is forwarded to a separate url on the same site. Should I exclude it until the subdomain is live or just delete the subdomain until ready to go live?

Yes, you should exclude it until it's live and resolving to the cPanel server. Then, simply remove the exclusion once it's pointed to the cPanel server.

Thanks!

 

[DumpsterDiver]

That seems to have fixed everything. Thank you so much for the help!!

 

[Jonathan Moore]

Please, can you explain the subdomain part of:
"
You can actually exclude domain names or subdomains that you don't utilize via the SSL TLS Status option in cPanel:

SSL TLS Status - Version 70 Documentation - cPanel Documentation
"

How can we exclude subdomains like mail, webdisk, webmail from the check?
I have been round the documentation and the interface several times and I can only see how to remove the whole domain.
In the meantime there are lots of alerts generated about missing subdomains mail, webdisk, webmail,

Is it mandatory to host mail, webdisk, webmail etc?
I don't really want to create additional DNS aliases for these services which are not going to be run, to avoid any additional attack traffic that might be probing for these names.

I had a final alert:
"
The SSL certificate for “example.com” has not been renewed. You must take action to secure this site.
"
though in the end there is an autossl but just for 1 month, so I know the alerts are going to continue shortly when the 1 month certificate approaches expiry.

 

[Jonathan Moore]

Update: I believe I just found this, it seems to be only available on Cpanel, whereas the autossl is controlled in WHM so I was expecting to control this in WHM. It seems odd to have to login to every cpanel account individually to remove their ficticious subdomains from autossl but at least it is possible.

 

[cPanelMichael]

Hello @Jonathan Moore,

If you want to disable proxy subdomains completely, then you can disable the following option under the Domains tab in WHM >> Tweak Settings:

Proxy subdomains

You can then remove the existing DNS entries for proxy subdomains using the proxydomains script:

The proxydomains Script - Version 70 Documentation - cPanel Documentation

Thank you.