Install SSL without DNS propagating?

[rinkleton]

Is it possible to install an SSL, preferably autossl, but any other kind could do, before DNS resolves?

Scenario: We have secure sites we are migrating to another server. It would be great if we could have the SSL all set up when the DNS switchover happens. We can manually do some kind of domain validation like email or a DNS entry. But it looks like WHM does let you install an SSL if the DNS isn't resolved.

 

[cPLevey]

Hey there!

cPanel's AutoSSL and SSL certificates from the cPanel Store (Market) require that the domain(s) resolve to a valid IP address for Domain Control Validation checks. However, I noticed in your scenario this is for migrating websites. As long as SSL certificates are installed on the cPanel server the accounts are being migrated from, the Transfer Tool should migrate the SSL certificates with them properly.

More information regarding the Transfer Tool can be found in our documentation here: Transfer Tool

 

[rinkleton]

After doing a test transfer the cert isn't listed in the store manager or in manage ssl hosts. However I can browse to it. So it seems like it transferred the cert but didn't apply it to the account? It seems like I would have to take some action after the DNS changes. I can test for sure later today.

Out of curiosity, is it cPanel that is enforcing this Domain Control Validation or is this something out of cPanel's ability to change? The cert in question has already had domain verification done by the issuer, RapidSSL in this case. Just wondering why it needs done again?

 

[cPanelMichael]

Out of curiosity, is it cPanel that is enforcing this Domain Control Validation or is this something out of cPanel's ability to change? The cert in question has already had domain verification done by the issuer, RapidSSL in this case. Just wondering why it needs done again?

Hello,

The domain control validation functionality only applies to the AutoSSL feature. Thus, if you purchased a certificate from RapidSSL, domain validation isn't required. The validation for cPanel-signed certificates is from Comodo. There's a thread here that explains the process:

cPanel & WHM’s AutoSSL/SSL ordering process

Let us know if you have any additional questions.

Thanks!

 

[rinkleton]

Got it. In this case there was something wrong with the root certs on this server not letting it install any SSL. We wiped it and started from scratch and seems to be working as you describe.