The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cPanel Shared IP users allow install SSL

Discussion in 'General Discussion' started by hostserver, Jul 31, 2014.

  1. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hello.
    How disable clients from installing SSL certificates on a shared IP?

    Home »Server Configuration »Tweak Settings ->
    Allow cPanel users to install SSL Hosts if they have a dedicated IP. on
     
  2. kernow

    kernow Well-Known Member

    Joined:
    Jul 23, 2004
    Messages:
    865
    Likes Received:
    9
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Check the feature manager and disable SSL Host Installer and or SSL Manager
     
  3. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Previously menu installs ssl appeared when you installed a dedicated IP.
    And what for then an option in Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." ?
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    653
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

    Thank you.
     
  5. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I would like to disable shared IP, but only for dedicated IP. Without changing the package.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    653
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

    Thank you.
     
  7. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.
     
  8. lorio

    lorio Well-Known Member

    Joined:
    Feb 25, 2004
    Messages:
    243
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator

    Status quo:
    A dedicated IP is no longer a prerequisite for installing an SSL certificate.

    So the option "Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." is no longer covering all situations. If the feature manager is needed to prevent installing in SSL the question really is what purpose the Tweak Option serves?
    Or is an SNI option needed in the tweaks section to cover these situations too?

    There is a difference between preparing certs and installing it on the apache. An restart is still needed for both (SNI/IP)?

    @hostmaster: If I get you right, you want to prevent SSL certs installations on SNI/sharedIP accounts.
     
  9. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    653
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

    Submit A Feature Request

    Thank you.
     
  10. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    This possibility was in previous versions cpanel. And it was very comfortable and did not need to create two identical package.
     
  11. jacksony

    jacksony Well-Known Member
    PartnerNOC

    Joined:
    Nov 30, 2005
    Messages:
    67
    Likes Received:
    0
    Trophy Points:
    6
Loading...

Share This Page