AutoSSL Questions and Suggestions

[zodiac9797]

I believe lot of users have questions about AutoSSL and suggestions, so maybe we can use this thread to help in solving issues and point developers in the right direction :D


Suggestions:

1. it would be useful if we can list only users with enabled/disabled/reset AutoSSL under Manage AutoSSL -> Manage Users

2. option to see number of issued AutoSSL certificates, it's hard to count them manually (maybe there is an option?) this would be helpful under Manage SSL Hosts, some table with info (counter) about AutoSSL, self-signed and other SSL's. Since we are limited to 200 AutoSSL's this would be useful

3. option to manually enable AutoSSL for every domain not only for account. This way we have users with many parked domains and they need AutoSSL only for primary domain, but we are unable to disable AutoSSL for parked or addon domains


Questions:

1. what to do with domains under "Manage SSL Hosts" with expired AutoSSL's which now have disabled AutoSSL, I can see date and notification "The certificate has expired", should I delete that certificate? Is it better to change them with self-signed cert and how to do that? Is that done by automatic process?

2. in cPanel v70, disabled AutoSSL for new accounts, contact information for AutoSSL will be unchecked (disabled)? what will happen if we enable AutoSSL for that account, will end user cPanel contact information options change?

3. option to pay for more AutoSSL's if we have over 200 AutoSSL's issued?

4. what will happen if AutoSSL is issued for an account "XY", and after some time quota of 200 certificates is filled. After some time AutoSSL will expire for the account "XY". Will it be auto renewed, since other users "took" it's place? How can we explain to our user that first he had AutoSSL and now he can't have it because someone else "took his place". Or I am missing something and don't have a clue how this works. :D

Thank You!

 

[cPanelMichael]

Hello,

1. it would be useful if we can list only users with enabled/disabled/reset AutoSSL under Manage AutoSSL -> Manage Users

2. option to see number of issued AutoSSL certificates, it's hard to count them manually (maybe there is an option?) this would be helpful under Manage SSL Hosts, some table with info (counter) about AutoSSL, self-signed and other SSL's. Since we are limited to 200 AutoSSL's this would be useful

Our feature request website is the best place to direct requests for new features or functionality. I encourage you to open feature requests for these improvements at:

Submit A Feature Request

3. option to manually enable AutoSSL for every domain not only for account. This way we have users with many parked domains and they need AutoSSL only for primary domain, but we are unable to disable AutoSSL for parked or addon domains

You can currently exclude specific domain names via the SSL TLS Status option in cPanel:

SSL TLS Status - Version 68 Documentation - cPanel Documentation

Is this the functionality you are looking for?

1. what to do with domains under "Manage SSL Hosts" with expired AutoSSL's which now have disabled AutoSSL, I can see date and notification "The certificate has expired", should I delete that certificate? Is it better to change them with self-signed cert and how to do that? Is that done by automatic process?

First, I'd check to see why AutoSSL was unable to renew the certificate. This generally only happens if the domain name no longer resolves to the cPanel server. If that's the case, then yes you can delete the existing AutoSSL certificate and then manually generate and install a self-signed certificate for the domain name using the below options:

Generate an SSL Certificate and Signing Request - Version 68 Documentation - cPanel Documentation
Install an SSL Certificate on a Domain - Version 68 Documentation - cPanel Documentation

2. in cPanel v70, disabled AutoSSL for new accounts, contact information for AutoSSL will be unchecked (disabled)? what will happen if we enable AutoSSL for that account, will end user cPanel contact information options change?

Once you enable AutoSSL for the account, the notification types you've enabled via "WHM >> Manage AutoSSL >> Options" will appear in the "Contact Information" option within cPanel. Changes made to the AutoSSL notifications via "Contact Information" in cPanel are stored and re-enabled if AutoSSL is enabled for the account after it was previously disabled.

3. option to pay for more AutoSSL's if we have over 200 AutoSSL's issued?

4. what will happen if AutoSSL is issued for an account "XY", and after some time quota of 200 certificates is filled. After some time AutoSSL will expire for the account "XY". Will it be auto renewed, since other users "took" it's place? How can we explain to our user that first he had AutoSSL and now he can't have it because someone else "took his place". Or I am missing something and don't have a clue how this works. :D

It's import to note the limit is per virtual host as opposed to per account:

How Your Server Handles Domains and Virtual Hosts - cPanel Knowledge Base - cPanel Documentation

AutoSSL prioritizes new certificates over the renewal of existing certificates. There's no feature to purchase higher rate limits, but it's rare to see the rate limit reached.

Thank you.

 

[zodiac9797]

That answers all of my questions. Thank you @cPanelMichael