Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

AutoSSL Questions and Suggestions

Discussion in 'Security' started by zodiac9797, Mar 20, 2018.

Tags:
  1. zodiac9797

    zodiac9797 Member

    Joined:
    Apr 17, 2011
    Messages:
    17
    Likes Received:
    3
    Trophy Points:
    53
    I believe lot of users have questions about AutoSSL and suggestions, so maybe we can use this thread to help in solving issues and point developers in the right direction :D


    Suggestions:


    1. it would be useful if we can list only users with enabled/disabled/reset AutoSSL under Manage AutoSSL -> Manage Users

    2. option to see number of issued AutoSSL certificates, it's hard to count them manually (maybe there is an option?) this would be helpful under Manage SSL Hosts, some table with info (counter) about AutoSSL, self-signed and other SSL's. Since we are limited to 200 AutoSSL's this would be useful

    3. option to manually enable AutoSSL for every domain not only for account. This way we have users with many parked domains and they need AutoSSL only for primary domain, but we are unable to disable AutoSSL for parked or addon domains


    Questions:

    1. what to do with domains under "Manage SSL Hosts" with expired AutoSSL's which now have disabled AutoSSL, I can see date and notification "The certificate has expired", should I delete that certificate? Is it better to change them with self-signed cert and how to do that? Is that done by automatic process?

    2. in cPanel v70, disabled AutoSSL for new accounts, contact information for AutoSSL will be unchecked (disabled)? what will happen if we enable AutoSSL for that account, will end user cPanel contact information options change?

    3. option to pay for more AutoSSL's if we have over 200 AutoSSL's issued?

    4. what will happen if AutoSSL is issued for an account "XY", and after some time quota of 200 certificates is filled. After some time AutoSSL will expire for the account "XY". Will it be auto renewed, since other users "took" it's place? How can we explain to our user that first he had AutoSSL and now he can't have it because someone else "took his place". Or I am missing something and don't have a clue how this works. :D

    Thank You!
     
    #1 zodiac9797, Mar 20, 2018
    Last edited: Mar 20, 2018
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,740
    Likes Received:
    1,796
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Our feature request website is the best place to direct requests for new features or functionality. I encourage you to open feature requests for these improvements at:

    Submit A Feature Request

    You can currently exclude specific domain names via the SSL TLS Status option in cPanel:

    SSL TLS Status - Version 68 Documentation - cPanel Documentation

    Is this the functionality you are looking for?

    First, I'd check to see why AutoSSL was unable to renew the certificate. This generally only happens if the domain name no longer resolves to the cPanel server. If that's the case, then yes you can delete the existing AutoSSL certificate and then manually generate and install a self-signed certificate for the domain name using the below options:

    Generate an SSL Certificate and Signing Request - Version 68 Documentation - cPanel Documentation
    Install an SSL Certificate on a Domain - Version 68 Documentation - cPanel Documentation

    Once you enable AutoSSL for the account, the notification types you've enabled via "WHM >> Manage AutoSSL >> Options" will appear in the "Contact Information" option within cPanel. Changes made to the AutoSSL notifications via "Contact Information" in cPanel are stored and re-enabled if AutoSSL is enabled for the account after it was previously disabled.

    It's import to note the limit is per virtual host as opposed to per account:

    How Your Server Handles Domains and Virtual Hosts - cPanel Knowledge Base - cPanel Documentation

    AutoSSL prioritizes new certificates over the renewal of existing certificates. There's no feature to purchase higher rate limits, but it's rare to see the rate limit reached.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    Infopro likes this.
  3. zodiac9797

    zodiac9797 Member

    Joined:
    Apr 17, 2011
    Messages:
    17
    Likes Received:
    3
    Trophy Points:
    53
    cPanelMichael and Infopro like this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice