Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cPanel Shared IP users allow install SSL

Discussion in 'General Discussion' started by hostserver, Jul 31, 2014.

  1. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    151
    cPanel Access Level:
    Root Administrator
    Hello.
    How disable clients from installing SSL certificates on a shared IP?

    Home »Server Configuration »Tweak Settings ->
    Allow cPanel users to install SSL Hosts if they have a dedicated IP. on
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. kernow

    kernow Well-Known Member

    Joined:
    Jul 23, 2004
    Messages:
    920
    Likes Received:
    13
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    Check the feature manager and disable SSL Host Installer and or SSL Manager
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    151
    cPanel Access Level:
    Root Administrator
    Previously menu installs ssl appeared when you installed a dedicated IP.
    And what for then an option in Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    It's been possible to install SSL certificates on shared IP addresses since cPanel version 11.38 with the added support for SNI. The option you referenced will also apply to shared IP addresses if SNI is supported on the server. You will likely want to disable the SSL features in the feature list associated with the package assigned to the account.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    151
    cPanel Access Level:
    Root Administrator
    I would like to disable shared IP, but only for dedicated IP. Without changing the package.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Could you elaborate on this statement? What do you mean when you say you want to disable a shared IP? Do you mean you want to disable the ability to install SSL certificates for user's that are assigned a shared IP address? If so, creating a separate package for accounts with dedicated IP addresses is required.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    151
    cPanel Access Level:
    Root Administrator
    This is inconvenient to create two identical package. Why can not I do as it was before? What is the advantage? Dedicated IP address is an optional service, and not a separate package.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. lorio

    lorio Well-Known Member

    Joined:
    Feb 25, 2004
    Messages:
    277
    Likes Received:
    9
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator

    Status quo:
    A dedicated IP is no longer a prerequisite for installing an SSL certificate.

    So the option "Tweak Settings->"Allow cPanel users to install SSL Hosts if they have a dedicated IP." is no longer covering all situations. If the feature manager is needed to prevent installing in SSL the question really is what purpose the Tweak Option serves?
    Or is an SNI option needed in the tweaks section to cover these situations too?

    There is a difference between preparing certs and installing it on the apache. An restart is still needed for both (SNI/IP)?

    @hostmaster: If I get you right, you want to prevent SSL certs installations on SNI/sharedIP accounts.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,367
    Likes Received:
    1,857
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    I suggest opening a feature request for the ability to limit SSL privileges based on the assignment of an IP address, even if SNI is supported:

    Submit A Feature Request

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. hostserver

    hostserver Active Member

    Joined:
    May 27, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    151
    cPanel Access Level:
    Root Administrator
    This possibility was in previous versions cpanel. And it was very comfortable and did not need to create two identical package.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. jacksony

    jacksony Well-Known Member
    PartnerNOC

    Joined:
    Nov 30, 2005
    Messages:
    67
    Likes Received:
    0
    Trophy Points:
    156
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice