Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Force SSL for all websites

Discussion in 'Security' started by Jeroen Maas, Jun 20, 2017.

  1. Jeroen Maas

    Jeroen Maas Registered

    Joined:
    May 28, 2017
    Messages:
    4
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Netherlands
    cPanel Access Level:
    Root Administrator
    Is it possible to force all cpanel hosted websites to run on HTTPS only? I know i can do it on a website basis using custom .htaccess. But is there a "global" way using WHM?

    Regards,

    Jeroen Maas
     
    #1 Jeroen Maas, Jun 20, 2017
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Jun 20, 2017
    Jeroen Maas likes this.
  3. Jeroen Maas

    Jeroen Maas Registered

    Joined:
    May 28, 2017
    Messages:
    4
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Netherlands
    cPanel Access Level:
    Root Administrator
    Just tried it out. That works really well! Thank you
     
    #3 Jeroen Maas, Jun 20, 2017
    cPanelMichael likes this.
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    I'm happy to see it works as intended. Thank you for updating us with the outcome.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Jun 20, 2017
  5. delia

    delia Member

    Joined:
    Feb 11, 2008
    Messages:
    21
    Likes Received:
    1
    Trophy Points:
    53
    Okay, so that is a wow! Please confirm that if you want all sites to use SSL that you choose the without SSL. That is counter intuitive to me! Are there any gotchas in this? There are sites already doing a forced redirect with the addition of force non to www. I'm having so much trouble getting these to work using cPanel redirects that I'm a bit hesitant to play with it server wide but this could be a major solution for me as long as I don't have sites going down all over the place.
     
    #5 delia, Feb 13, 2018
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Right, you'd use the "Without SSL" instructions to apply the rules in your custom include file to access attempts made using "http" and not "https". There's always a potential for custom Mod_Rewrite rules to conflict with the website's script. You may want to test the rules on individual virtual hosts first to make sure they don't lead to any issues accessing the websites.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Feb 13, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - Force websites
  1. Errota

    Force HTML On Clients Websites

    Errota, Oct 14, 2018, in forum: General Discussion
    Replies:
    2
    Views:
    73
    cPanelLauren
    Oct 17, 2018 at 7:11 AM
  2. Rogerio

    New Thread Force regenerate server's SSL certificate

    Rogerio, Oct 18, 2018 at 11:08 AM, in forum: Security
    Replies:
    0
    Views:
    40
    Rogerio
    Oct 18, 2018 at 11:08 AM
  3. batesy87

    Pending Publication [CPANEL-22169] Pure-FTPd: Preserve disabled ForcePassiveIP when NAT is active

    batesy87, Sep 12, 2018, in forum: General Discussion
    Replies:
    3
    Views:
    172
    cPanelMichael
    Sep 12, 2018
  4. joaosavioli

    Brute force wp-login.php modsecurity

    joaosavioli, Sep 4, 2018, in forum: General Discussion
    Replies:
    4
    Views:
    242
    cPanelLauren
    Sep 5, 2018
  5. Sanjay Narayan

    Force email password change after 1st login

    Sanjay Narayan, Aug 16, 2018, in forum: General Discussion
    Replies:
    10
    Views:
    171
    Sanjay Narayan
    Sep 17, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice