Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Change default apache server.crt

Discussion in 'Security' started by bloatedstoat, Jan 22, 2017.

Tags:
  1. bloatedstoat

    bloatedstoat Well-Known Member

    Joined:
    Jun 14, 2012
    Messages:
    102
    Likes Received:
    9
    Trophy Points:
    18
    Location:
    Victoria, Australia
    cPanel Access Level:
    Root Administrator
    I purchased an SSL certificate that matches the server name.

    The below command however, results in the default SSL certificate installed by our server supplier showing up:

    Code:
    openssl x509 -in /etc/apache2/conf.d/ssl.crt/server.crt -noout -subject
subject= /emailAddress=ssl@ded.serversupplier.com.au/CN=ded.serversupplier.com.au
    How can I change it so that our own SSL certificate is used?

    Secondly, within SSL storage manager under User Account SSL Resources there is the following line:

    The SSL resources below are available to your account

    Here are a whole slew of certificates, mostly from the server supplier when the server was provisioned and in the mix there appears our own certificate. Is it safe to delete the server supplier ones leaving the one I bought and would it affect the system adversely if they were deleted?

    Thank you!
     
    #1 bloatedstoat, Jan 22, 2017
  2. Eminds

    Eminds Well-Known Member

    Joined:
    Nov 10, 2016
    Messages:
    263
    Likes Received:
    19
    Trophy Points:
    18
    Location:
    India
    cPanel Access Level:
    Root Administrator
    What type of SSL you have purchased ? is it wildcard SSL or a multi domain SSL

    and have you installed this SSL on server hostname ?
     
    #2 Eminds, Jan 22, 2017
  3. bloatedstoat

    bloatedstoat Well-Known Member

    Joined:
    Jun 14, 2012
    Messages:
    102
    Likes Received:
    9
    Trophy Points:
    18
    Location:
    Victoria, Australia
    cPanel Access Level:
    Root Administrator
    It is not a wildcard cert, the certificate is solely for name.domain.com.au which is the server's hostname.
    I have installed it as the service certificate for exim, cpanel, whm, ftp etc; from within Service Configuration > Manage Service SSL Certificates.

    How do I update Apache so that the name.domain.com.au certificate replaces the one currently found at /etc/apache2/conf.d/ssl.crt/server.crt?

    Thanks.
     
    #3 bloatedstoat, Jan 22, 2017
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You should be able to install the certificate for the server's hostname via:

    "WHM Home » SSL/TLS » Install an SSL Certificate on a Domain"

    Could you let us know of any specific error messages you encounter when using this option?

    Thank you.
     
    #4 cPanelMichael, Jan 27, 2017
  5. bloatedstoat

    bloatedstoat Well-Known Member

    Joined:
    Jun 14, 2012
    Messages:
    102
    Likes Received:
    9
    Trophy Points:
    18
    Location:
    Victoria, Australia
    cPanel Access Level:
    Root Administrator
    Thanks Michael, I attempted the update and received the following:

    Just to clarify, this is to replace the certificate in /etc/apache2/conf.d/ssl.crt/server.crt which is outputting:

    Code:
    openssl x509 -in /etc/apache2/conf.d/ssl.crt/server.crt -noout -subject
subject= /emailAddress=ssl@ded.serversupplier.com.au/CN=ded.serversupplier.com.au
    I'd like the output to be hostname.domainname.com.au.

    Thanks.
     
    #5 bloatedstoat, Jan 30, 2017
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can manually populate the /etc/apache2/conf.d/ssl.crt/server.crt and /etc/apache2/conf.d/ssl.key/server.key files with CRT and KEY of your new certificate.

    Thank you.
     
    #6 cPanelMichael, Feb 3, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - Change default apache
  1. dhruva kumar

    Changed Default Account Directory in httpd.conf Issue

    dhruva kumar, Dec 19, 2017, in forum: EasyApache
    Replies:
    3
    Views:
    235
    24x7server
    Dec 21, 2017
  2. Cloudtech

    Secure SSH change Default port to an secured not listed in internet

    Cloudtech, Nov 30, 2017, in forum: Security
    Replies:
    2
    Views:
    219
    Cloudtech
    Dec 2, 2017
  3. Sametto Chan

    Change PHP-FPM Pool Settings default values?

    Sametto Chan, Nov 23, 2017, in forum: EasyApache
    Replies:
    2
    Views:
    1,138
    cPanelMichael
    Nov 27, 2017
  4. tony_ssi

    Change default values in /var/cpanel/php-fpm.d/username.conf

    tony_ssi, Nov 23, 2017, in forum: General Discussion
    Replies:
    3
    Views:
    382
    cPanelMichael
    Nov 29, 2017
  5. gersonfs

    How change default pool directives

    gersonfs, Oct 7, 2017, in forum: EasyApache
    Replies:
    3
    Views:
    323
    cPanelMichael
    Oct 10, 2017

Share This Page