Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Does AutoSSL work with server hostname SSL?

Discussion in 'Security' started by postcd, Apr 4, 2017.

Tags:
  1. postcd

    postcd Well-Known Member

    Joined:
    Oct 22, 2010
    Messages:
    694
    Likes Received:
    15
    Trophy Points:
    68
    Hello,

    does AutoSSL works to setup certificate for the WHM server hostname (which is not subdomain setup in cPanel, or should i setu new subdomain for my server hostname in its cpanel)?

    in WHM/Service Configuration/Manage Service SSL Certificates

    i have SSL certificate and it is valid when i access WHM/cpanel using my WHM server hostname

    https://my.hostname.here:2087

    But when i access:
    https://my.hostname.here

    it shows SSL mismatch as the WHM is using default SSL for the server and it is first cpanel account in the server's apache virtualhost file (/etc/httpd/conf/httpd.conf). When i go to WHM/SSL/Manage SSL hosts and use as a default the SSL of a domain name that match my server hostname (my.hostname.here -> hostname.here), then it still shows mismatch because it is using SSL for one of the addon domains that i have in that cPanel :-/ and indeed in /etc/httpd/conf/httpd.conf under virtualhost of my servber hostname domain i see something like this (i modified numbers):
    and in /var/cpanel/ssl/installed/keys/
    is not .crt file for my main server domain name.

    The AutoSSL log shows:
    But it installed SSL only for my addon domains, i not reported any installation for main domain name.

    So i wanted to solve this by installing AutoSSL for my WHM server hostname. Is it now possible after WHM is made to create cetificates also for subdomains?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 postcd, Apr 4, 2017
    Last edited: Apr 4, 2017
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Information about how the free cPanel-signed hostname certificate works is available at:

    Free cPanel-Signed Hostname Certificate - cPanel Knowledge Base - cPanel Documentation

    Setting up a subdomain under an account for your server's hostname is not recommended.

    This is the expected behavior. The free cPanel-signed SSL certificate for the server's hostname is not installed for Apache. You can install the hostname's certificate to Apache using the following option:

    "WHM Home » SSL/TLS »Install an SSL Certificate on a Domain"

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Apr 4, 2017
  3. postcd

    postcd Well-Known Member

    Joined:
    Oct 22, 2010
    Messages:
    694
    Likes Received:
    15
    Trophy Points:
    68
    Hello, and thank You.

    There is no way yet to Generate new auto-renewing (AutoSSL, cPanel-Comodo, LetsEncrypt) certificate for the server hostname? I need to generate only self signed one within WHM or use some third party tool for creating and renewing free signed cert.? it would be good if it is easier to establish signed auto-renewing certificate for the server hostname.

    AutoSSL/cPanel SSL on server hostname for Apache
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 postcd, Apr 4, 2017
  4. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,344
    Likes Received:
    58
    Trophy Points:
    178
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    By default your server should automatically renew your server hostname certificate with a cPanel-signed SSL certificate.

    Manage Service SSL Certificates - Documentation - cPanel Documentation
    - scroll down to "Free cPanel-signed certificate"

    However, if you manually touched (created) /var/cpanel/ssl/disable_service_certificate_management and /var/cpanel/ssl/disable_auto_hostname_certificate, then your server will not automatically renew your hostname SSL with a free cPanel-signed SSL.

    If you read the "free cPanel-signed certificate" section, it specifically tells you what criteria need to be met in order for the server to automatically generated a new cPanel-signed certificate for your server hostname.

    Mike
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 mtindor, Apr 5, 2017
    cPanelMichael likes this.
  5. postcd

    postcd Well-Known Member

    Joined:
    Oct 22, 2010
    Messages:
    694
    Likes Received:
    15
    Trophy Points:
    68
    @mtindor
    I think that you are speaking about hostname based certificate for cpanel/WHM services, but i am talking about hostname certificate itself.

    service certificate:
    https://host.name.here:2087 - WORKS good for me, no problem with that, it is signed

    hostname certificate:
    https://host.name.here - problem. shows insecure warning / SSL match other domain on same server

    cPanel Michael said that "free cPanel-signed SSL certificate for the server's hostname is not installed for Apache."
    I understand i can somehow manually install signed certificate for hostname, but that is not my point, my point is to do it so 1) the renewals are automated, 2) i do not need to use third party tools for that 3) i do not need to order paid certificate somewhere

    i think your answer does not answer my issue (if i am not wrong :confused:).. you address services but me address hostname itself
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 postcd, Apr 12, 2017
  6. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,344
    Likes Received:
    58
    Trophy Points:
    178
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    You are correct. I misunderstood. Now that I understand what you are wanting, I do agree that it would be nice if the free cPanel hostname SSL cert would automatically be applied to https://serverhostname:443.

    You can do it manually though. I just did it manually via WHM -> Install an SSL Certificate on a Domain, where I then browsed the account root (not apache) and chose/installed the cPanel Inc signed certificate.

    Would it be nice for this all to happen automatically? I think so. But, at least you can manually assign the certificate to https://serverhostname:443.

    Mike
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 mtindor, Apr 12, 2017
    postcd likes this.
  7. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    This would require new functionality (including the hostname with the AutoSSL feature for Apache). I encourage anyone else wanting this feature to vote and add feedback to the existing feature request at:

    AutoSSL/cPanel SSL on server hostname for Apache

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #7 cPanelMichael, Apr 12, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - Does AutoSSL server
  1. livingmiracles

    How Does Server Migration Affect AutoSSL Certificates?

    livingmiracles, May 5, 2017, in forum: Security
    Replies:
    2
    Views:
    882
    livingmiracles
    May 11, 2017
  2. Benjamin D.

    Potential reduced AutoSSL coverage for subdomain that doesn't exist?

    Benjamin D., Sep 16, 2018, in forum: Security
    Replies:
    4
    Views:
    163
    Benjamin D.
    Sep 23, 2018
  3. Benjamin D.

    SOLVED AutoSSL doesn't pick up my hostname?

    Benjamin D., Jul 25, 2018, in forum: Security
    Replies:
    2
    Views:
    190
    cPanelMichael
    Jul 26, 2018
  4. 4u123

    SOLVED AutoSSL "does not own" errors for www.mail subdomains

    4u123, Jun 13, 2018, in forum: Security
    Replies:
    6
    Views:
    475
    4u123
    Jun 19, 2018
  5. Webbice

    AutoSSL does not resolve to any IPv4 addresses on the internet.

    Webbice, Jun 4, 2018, in forum: Security
    Replies:
    13
    Views:
    1,265
    cPanelLauren
    Jun 11, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice