cPanel Shared IP users allow install SSL

[hostserver]

Hello.
How disable clients from installing SSL certificates on a shared IP?

Home »Server Configuration »Tweak Settings ->
Allow cPanel users to install SSL Hosts if they have a dedicated IP. on

 

[kernow]

Check the feature manager and disable SSL Host Installer and or SSL Manager

 

[hostserver]

Check the feature manager and disable SSL Host Installer and or SSL Manager

Previously menu installs ssl appeared when you installed a dedicated IP.
And what for then an option in Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." ?

 

[cPanelMichael]

Hello

It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

Thank you.

 

[hostserver]

Hello

It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

Thank you.

I would like to disable shared IP, but only for dedicated IP. Without changing the package.

 

[cPanelMichael]

I would like to disable shared IP, but only for dedicated IP. Without changing the package.

Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

Thank you.

 

[hostserver]

Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

Thank you.

This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.

 

[lorio]

This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.

Status quo:
A dedicated IP is no longer a prerequisite for installing an SSL certificate.

So the option "Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." is no longer covering all situations. If the feature manager is needed to prevent installing in SSL the question really is what purpose the Tweak Option serves?
Or is an SNI option needed in the tweaks section to cover these situations too?

There is a difference between preparing certs and installing it on the apache. An restart is still needed for both (SNI/IP)?

@hostmaster: If I get you right, you want to prevent SSL certs installations on SNI/sharedIP accounts.

 

[cPanelMichael]

This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.

I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

Submit A Feature Request

Thank you.

 

[hostserver]

I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

Submit A Feature Request

Thank you.

This possibility was in previous versions cpanel. And it was very comfortable and did not need to create two identical package.

 

[jacksony]

Yes, this is causing big problem for us as users does not have any idea and thought they can install on shared IP. cPanel please help us by solving this issue. Creating 2 similiar package just for this is not workable for many of us. Vote for the feature here: Prevent the users from installing SSL on Shared IP address | cPanel Feature Requests