cpanel SSL certificate?

ckizer

Well-Known Member
Aug 12, 2001
127
0
316
I want to purchase and install a certificate for the /securecontrolpanel/ URL i have all my users (we setup /ctrl) go through the control panel securly, but many of the customers are upset because the SSL says that it's not for this domain (they think it is a security risk) is it possible to have a certificate for this? And if so how do I go about installing it?

I already have a certificate for my secure signups, I assume i will need another one.



[Edited on 8/13/01 by ckizer]
 
B

bdraco

Guest
[quote:7c365cf822]I want to purchase and install a certificate for the /securecontrolpanel/ URL i have all my users (we setup /ctrl) go through the control panel securly, but many of the customers are upset because the SSL says that it\'s not for this domain (they think it is a security risk) is it possible to have a certificate for this? And if so how do I go about installing it?

I already have a certificate for my secure signups, I assume i will need another one.



[Edited on 8/13/01 by ckizer] [/quote:7c365cf822]

The pem file is in /usr/local/cpanel/etc/cpanel.pem

Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it.
 

ckizer

Well-Known Member
Aug 12, 2001
127
0
316
lol, sorry that went over my head. can i use the certificate I have now? I use it for secure signups and such, if not how should i generate the CRM for this (whm?)
 
B

bdraco

Guest
[quote:8821658cd5]lol, sorry that went over my head. can i use the certificate I have now? I use it for secure signups and such, if not how should i generate the CRM for this (whm?) [/quote:8821658cd5]

If you have out from thawte just login and download a PEM certificate and copy it to the location mentioned
 

ckizer

Well-Known Member
Aug 12, 2001
127
0
316
also how do i find out the path to tell customers to call their site securely?
 

teck

Well-Known Member
Aug 10, 2001
162
0
316
Won't https://www.sharpwebinnovations.com/~userlogin work?

Also, Court, can you tell me how you installed the Equifax cert? I'm getting one soon and I might need help since I heard it was tricky. Feel free to email me if you wish :)

[Edited on 8/13/01 by teck]
 

smilb

Member
Aug 10, 2001
11
0
301
Just did mine, its not that hard. You need to edit two things. The cert itself and the key. Copy this /usr/local/cpanel/etc/cpanel.pem and edit the cert and key. Both are in the one file. Put the edited cpanel.pem back, restart ssl. You will be happy to get rid of localhost.......Also do as Nick said and lock the file so it won\'t be overwritten on next update.......
 

moronhead

Well-Known Member
Aug 12, 2001
706
0
316
[quote:b17bcb8fee] Just did mine, its not that hard. You need to edit two things. The cert itself and the key. Copy this /usr/local/cpanel/etc/cpanel.pem and edit the cert and key. Both are in the one file. Put the edited cpanel.pem back, restart ssl. You will be happy to get rid of localhost....... [/quote:b17bcb8fee]

What info do I put in the cert and key sections of the pem file? And where do I get it from? :(
 

smilb

Member
Aug 10, 2001
11
0
301
I got my cert from www.freessl.com......replace your key and cert for the one in cpanel.pem

[Edited on 8/16/01 by smilb]
 

moronhead

Well-Known Member
Aug 12, 2001
706
0
316
smlib,

[quote:c1b409cb0a] I got my cert from www.freessl.com......replace your key and cert for the one in cpanel.pem [/quote:c1b409cb0a]
I couldn\'t quite get that. Did you replace the contents of your key and freessl cert with the contents in cpanel.pem? Or is it the other way around? :(
 

smilb

Member
Aug 10, 2001
11
0
301
Put your key in cpanel.pem replace the one that is there.

Put your cert in cpanel.pem replace the one that is there.

Put the file back....

The pem file is in /usr/local/cpanel/etc/cpanel.pem

Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it.
 

moronhead

Well-Known Member
Aug 12, 2001
706
0
316
[quote:cc37e92f0c]Just chattr it +i after you install it so the cpanel install doesn\'t overwrite it. [/quote:cc37e92f0c]
Thanks smilb. I\'ve got it now. :)

The freessl seems to be a good option. I only wish it would also work with Netscape, although apparently it will soon.
 

Karl

Well-Known Member
PartnerNOC
Aug 10, 2001
87
1
308
smilb - I just tried your instructions and it doesn\'t work for me. CPanel just sits there and hangs on Starting CPanel ssl services. :(
 

Brad

Well-Known Member
Aug 16, 2001
229
0
316
Use port 2083

[quote:17ee3410b1]smilb - I just tried your instructions and it doesn\'t work for me. CPanel just sits there and hangs on Starting CPanel ssl services. :( [/quote:17ee3410b1]
 

Karl

Well-Known Member
PartnerNOC
Aug 10, 2001
87
1
308
I mean when restarting CPanel after updating the cpanel.pem file. Not when trying to access the secure CPanel.
 

indiboi

Well-Known Member
Aug 14, 2001
89
0
306
I\'d successfully (at least it seemed like it) changed the cert info in the cpanel.pem but didn\'t lock the file, I wasn\'t sure it would work, so I didn\'t want to prevent cpanel updates from fixing it. Well, like I said, it did work, but now when I try to edit the information again or replace the default cpanel.pem with my edited version, it still says localhost. I\'m doing everything per the above instructions, repeating what I\'d done the other day, but this time the change doesn\'t effect the cert status.

Does anyone have any suggestions?
 

rpmws

Well-Known Member
Aug 14, 2001
1,787
10
318
back woods of NC, USA
I have over 10 Equifax / Geo Trust SSL certs running. They have 2 different CA trusts. The most important thing I found was I had to paste soem Equifax content into the Ca-bundle file to keep browsers from warning about untrusted CAs.

I have also seen the browser return to a blank page after WHM cert installation. Seems like IE was the cause ..SSL wasn\'t working for the domain so I restarted apache and it worked.
 

indiboi

Well-Known Member
Aug 14, 2001
89
0
306
finally found the way to restart cpanel, fixed the problem:

/etc/rc.d/init.d/cpanel3 restart

[Edited on 11/26/01 by indiboi]