SSL Cert issues for WHM/cPanel etc

evano

Registered
Jan 25, 2013
2
0
1
cPanel Access Level
DataCenter Provider
Hi guys

I have a question about SSL certs for cPanel. We like to give clients their own mail.domainname.com address to configure their email clients, so it seems more personalised to them, instead of using the servers hostname. We have an SSL cert for the hostname itself, so if you go directly through to cpanel, WHM or Webmail, everything is cool and it throws up no errors. However, if we send them through to mail.domainname.com:2096 it obviously redirects through to the main server IP and throws up a misconfiguration issue. It also throws up errors for them in Outlook, which is the main concern. I have purchased an SSL cert for mail.domainname.com and it works when visiting that domain, but obviously as soon as the redirect takes place, it breaks anything...

Does anyone have any suggestions as to how they deal with this situation? I'd much rather give them their own mail host names then sending them through to our shared server name everytime...

Many thanks!

Evan
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,267
463
Hello :)

We only support a single SSL certificate for Dovecot/Courier and Exim. This is managed via:

"WHM Home » Service Configuration » Manage Service SSL Certificates"

Thus, the users will need to accept the certificate warning when accessing their email securely through their email client. Otherwise, they will have to configure their email client to use the SSL Certificate named configured in "Manage Service SSL Certificates". You are welcome to submit a feature request to add support for multiple service certificates. Our feature request system can be found at:

Submit A Feature Request

Thank you.
 

evano

Registered
Jan 25, 2013
2
0
1
cPanel Access Level
DataCenter Provider
Ok, that's a bit annoying but I can live with that for now...

I have a question about using these accounts in Outlook though...even after having a cert installed for the main server, and despite using this as the server settings in outlook I am still getting the Server certificate is not trusted...

Why is this? I have heaps of clients complaining about this issue :(
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,267
463
I have a question about using these accounts in Outlook though...even after having a cert installed for the main server, and despite using this as the server settings in outlook I am still getting the Server certificate is not trusted...
Self-signed certificates are installed by default. You will need to purchase and install a SSL certificate from a commercial SSL provider in order to prevent the warning from appearing.

Thank you.
 

rodpascoe

Member
Aug 12, 2012
10
6
3
cPanel Access Level
Root Administrator
Self-signed certificates are installed by default. You will need to purchase and install a SSL certificate from a commercial SSL provider in order to prevent the warning from appearing.

Thank you.


Just to confirm, would one certificate purchased by me for the main server itself stop the error messages about certificates appearing for ALL user accounts logging in to cPanel and email?
 

quietFinn

Well-Known Member
Feb 4, 2006
2,037
549
493
Finland
cPanel Access Level
Root Administrator
Just to confirm, would one certificate purchased by me for the main server itself stop the error messages about certificates appearing for ALL user accounts logging in to cPanel and email?
They don't get the warning if they connect using server's hostname.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,267
463
Just to confirm, would one certificate purchased by me for the main server itself stop the error messages about certificates appearing for ALL user accounts logging in to cPanel and email?
Yes, as long as they connect using the SSL certificate name in their email client, and use the SSL certificate name in their web browser when accessing cPanel/WHM/Webmail. You can browse to the "Redirection" tab in "WHM Home » Server Configuration » Tweak Settings" to enable redirects to the SSL certificate name for users visiting /cpanel or /whm or /webmail.

Thank you.