Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

https access redirects to defaultwebpage.cgi

Discussion in 'General Discussion' started by PatrickVeenstra, May 17, 2014.

Page 1 of 2
  1. PatrickVeenstra

    PatrickVeenstra Well-Known Member

    Joined:
    Feb 12, 2012
    Messages:
    155
    Likes Received:
    3
    Trophy Points:
    68
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    If I try to access my site using https I get redirected to /cgi-sys/defaultwebpage.cgi
    Why is that and how can I fix it?
     
    #1 PatrickVeenstra, May 17, 2014
  2. PatrickVeenstra

    PatrickVeenstra Well-Known Member

    Joined:
    Feb 12, 2012
    Messages:
    155
    Likes Received:
    3
    Trophy Points:
    68
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    Not sure if this is a bug, but here's a fix: Fix cPanel showing “Default Website Page” for HTTPS/SSL | daft spunk blog

    edit /usr/local/apache/htdocs/index.html
    replace
    Code:
    <html><head><META HTTP-EQUIV="refresh" CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>
    with
    Code:
    <html><head><script> window.location.href = (window.location.protocol != "http:") ? "http:" + window.location.href.substring(window.location.protocol.length) : "/cgi-sys/defaultwebpage.cgi"; </script></head><body></body></html>
    - - - Updated - - -

    OK, that doesn't seem to work when there's a htaccess redirect :(

    any solution?
     
    #2 PatrickVeenstra, May 17, 2014
  3. PatrickVeenstra

    PatrickVeenstra Well-Known Member

    Joined:
    Feb 12, 2012
    Messages:
    155
    Likes Received:
    3
    Trophy Points:
    68
    Location:
    Barcelona
    cPanel Access Level:
    Root Administrator
    ok, so without certificate it redirects.... interesting, and solved.
     
    #3 PatrickVeenstra, May 17, 2014
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    Is a SSL certificate installed for the domain name? Or, is a SSL certificate installed on the same IP address assigned to this account?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, May 19, 2014
  5. Irksome73

    Irksome73 Member

    Joined:
    Oct 17, 2013
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I'm seeing the same thing here. Michael what exactly are you referring to about where the SSL certificate is installed - we have a wildcard cert installed in cPanel (SSL Manager) for some of the domains?
     
    #5 Irksome73, Aug 13, 2014
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    It's likely you have installed a SSL certificate on a shared IP address. Thus, any attempts to access SSL content on other domain names assigned that same IP address will result in you seeing the contents of the domain name you installed the certificate for. Ensure you install a SSL certificate individually for each domain name on that IP address to avoid this problem.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Aug 13, 2014
  7. Irksome73

    Irksome73 Member

    Joined:
    Oct 17, 2013
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Michael,

    I want to use a shared IP - this should be possible as 99% of our visitors support SNI and we as a provider are trying to restrict the number of IP4 address's we hand out?
     
    #7 Irksome73, Aug 13, 2014
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Yes, it's perfectly acceptable to install a SSL certificate on a shared IP address using the SNI functionality. However, if the account is assigned a shared IP address, and a SSL certificate is installed on that IP address, then any secure request to a domain name on that IP address will load the contents of the primary host the certificate is installed for. This is by design. You will need to assign a dedicated IP address to the account that uses the SSL certificate if you don't want that certificate applied to the other domain names on it's IP address. Or, you could generate/install a self-signed certificate for each domain name on the server. You can also make a different installed certificate the primary certificate via the "Make Primary" action under the "Manage SSL Hosts" option in WHM if you want a different certificate to appear for Virtual Hosts without a certificate installed.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelMichael, Aug 13, 2014
  9. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi Michael,
    I had a domain using an IP shared with other accounts and this main domain had it's own SSL. Actually when tying with HTTPS other domains on the shared, they used to be redirected to the domain with the SSL certificate, as you explained.

    Now I have first removed the certificate, then moved the domain account to a dedicated IP and then reinstalled the certificate for that specific account and everything is fine.
    But when typing with HTTPS other domains on the old shared IP, I'm receiving the default Apache page as described in this post.

    I have changed the /usr/local/apache/htdocs/index.html as described but this is not a proper fix as when typing with subapages (HTTPS://domain.com/subpage.php) does not really work.
    Any other idea?
     
    #9 oviliz, Sep 11, 2015
  10. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    PS. Don't know if related but worth to mention that I'm using Apache with nginx. When moved the domain to the different dedicated IP, the domain didn't work anymore when accessing with only HTTP (httpS was fine). So I had to manually change the IP on the nginx vhost domain file from the old shared (and server main) IP to the dedicated IP.
    The interesting thing is that I have recently moved a new domain to the server directly with it's own dedicated IP (so never been on the shared IP) and on the nginx vhosts I however have the server (shared) IP and it works fine both HTTP/HTTPS... no glue on this...
     
    #10 oviliz, Sep 11, 2015
  11. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Are you able to reproduce the issue after temporarily disable Nginx? Nginx is not natively supported so we often ask customers to temporarily disable it when troubleshooting these types of issues.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #11 cPanelMichael, Sep 11, 2015
  12. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi Michael, thanks for your reply.

    I was actually following these steps penguinbliss.com/?p=281#comment-16943 to understand that the HTTP request of the moved IP domain didn't work because of nginx.

    I have disabled nginx as you requested and both HTTP/HTTPS requests didn't work at all.
    This is strange because when I have disabled nginx the first time to test my first issue, everything went fine with just Apache...

    HTTPS worked fine on the 2 domains with certificates (didn't tried just HTTP on these 2 because of htaccess and WordPress redirection settings / is a production server too with many domains so I have to test and revert quickly).

    There is one more thing when trying HTTPS on domains without SSL. They are using the webserver (cPanel) certificate and this I believe is how is supposed to be.
     
    #12 oviliz, Sep 14, 2015
  13. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    PS. Sorry but I'm not more able to edit my previous post.

    Just didn't replaced all the 8081... Actually with Apache HTTP is fine but HTTPS still doesn't work (cleared browser cache and tried with different browsers and alternative domains).

    HTTPS is only fine with SSL domains.
     
    #13 oviliz, Sep 14, 2015
  14. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    Have you installed a multi-domain certificate or have you shared an existing certificate? Keep in mind that sharing a certificate won't make other domain names accessible over HTTPS. Rather, you can access the content from other domain names over the name of the existing certificate (e.g. domain.com/~username).

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #14 cPanelMichael, Sep 14, 2015
  15. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Ok, that's fair enough. But still, there is no way to redirect HTTPS requests to the legitimate HTTP domains?
     
    #15 oviliz, Sep 14, 2015
  16. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    That's only possible if you install a SSL certificate on the domain name and then use custom Mod_Rewrite rules in the .htaccess file to redirect secure requests to the insecure URL.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #16 cPanelMichael, Sep 14, 2015
  17. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Thank you Michael!
     
    #17 oviliz, Sep 15, 2015
  18. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    PS. Sorry, just a last question. Can I use the same shared IP between different accounts to install multiple specific SSL certs for their domains?
     
    #18 oviliz, Sep 15, 2015
  19. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,685
    Likes Received:
    2,087
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Yes, this will work by default as long as the server is using CentOS/RHEL/CL version 6 or higher (supports SNI).

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #19 cPanelMichael, Sep 15, 2015
  20. oviliz

    oviliz Member

    Joined:
    Feb 23, 2013
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I have actually tested it and it works. :)
    Thank you.
     
    #20 oviliz, Sep 25, 2015
(You must log in or sign up to post here.)
Page 1 of 2
Loading...
Similar Threads - https access redirects
  1. Mrinmoy

    Redirecting from http to https through .htaccess

    Mrinmoy, Feb 9, 2019, in forum: Security
    Replies:
    4
    Views:
    197
    Mrinmoy
    Feb 12, 2019
  2. Melissa2019B

    SOLVED Doing an htaccess redirect for www to non-www with https?

    Melissa2019B, Jan 29, 2019, in forum: EasyApache
    Replies:
    8
    Views:
    307
    Infopro
    Feb 1, 2019
  3. DouglasRedvers

    htaccess redirect from www to https issue

    DouglasRedvers, Nov 27, 2018, in forum: General Discussion
    Replies:
    2
    Views:
    332
    cPanelLauren
    Nov 28, 2018
  4. keneso

    Add HTTPS Redirect to htaccess?

    keneso, Nov 26, 2018, in forum: Security
    Replies:
    2
    Views:
    416
    keneso
    Nov 28, 2018
  5. The Web Servant

    Access to site via HTTPS but not HTTP?

    The Web Servant, Jan 5, 2018, in forum: Security
    Replies:
    4
    Views:
    664
    cPanelMichael
    Jan 10, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice