cPanel Shared IP users allow install SSL

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
Hello :)

It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

Thank you.
 

hostserver

Active Member
May 27, 2005
25
0
151
cPanel Access Level
Root Administrator
Hello :)

It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

Thank you.
I would like to disable shared IP, but only for dedicated IP. Without changing the package.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
I would like to disable shared IP, but only for dedicated IP. Without changing the package.
Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

Thank you.
 

hostserver

Active Member
May 27, 2005
25
0
151
cPanel Access Level
Root Administrator
Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

Thank you.
This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.
 

lorio

Well-Known Member
Feb 25, 2004
310
20
168
cPanel Access Level
Root Administrator
This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.

Status quo:
A dedicated IP is no longer a prerequisite for installing an SSL certificate.

So the option "Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." is no longer covering all situations. If the feature manager is needed to prevent installing in SSL the question really is what purpose the Tweak Option serves?
Or is an SNI option needed in the tweaks section to cover these situations too?

There is a difference between preparing certs and installing it on the apache. An restart is still needed for both (SNI/IP)?

@hostmaster: If I get you right, you want to prevent SSL certs installations on SNI/sharedIP accounts.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,213
363
This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.
I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

Submit A Feature Request

Thank you.
 

hostserver

Active Member
May 27, 2005
25
0
151
cPanel Access Level
Root Administrator
I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

Submit A Feature Request

Thank you.
This possibility was in previous versions cpanel. And it was very comfortable and did not need to create two identical package.