Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SSL Shared IP Problem

Discussion in 'Security' started by flashweb, Jul 27, 2015.

  1. flashweb

    flashweb Well-Known Member

    Joined:
    Mar 13, 2003
    Messages:
    253
    Likes Received:
    2
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    I have the problem described at

    https://documentation.cpanel.net/display/ALD/SSL+FAQ+and+Troubleshooting#SSLFAQandTroubleshooting-Mycertificateinstalled,butvisitorswhotrytosecurelyaccessothersitesonthesharedIPaddresscanonlyseethesitewithaninstalledSSLcertificate,notmydefaultdomain.

    In the documentation, its says

    Code:
    SSLCertificateFile SSLCERTIFICATEFILE
    SSLCertificateKeyFile YOUR-SSLCERTIFICATEKEYFILE
    
    Where do i get the SSL Cert ? Since cpanel already have a self signed CERT for hostname generated, where i can find it ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,478
    Likes Received:
    421
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    In WHM, top left corner is a search tool, type in SSL. Find, "Manage Service SSL Certificates" in result.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. flashweb

    flashweb Well-Known Member

    Joined:
    Mar 13, 2003
    Messages:
    253
    Likes Received:
    2
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    I already checked that. But it do not show actual location of the SSL certificate (.crt/.key files). I want to use this SSL certificate for Apache too.

    I done search for hostname.crt, found certificate file in /etc/pki/tls/certs, but i can't find where the private key is stored, there is a private folder (/etc/pki/tls/private), that is empty.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    Could you describe the specific issue you are experiencing, as opposed to posting the documentation URL, just so that we are clear on the specific problem?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. flashweb

    flashweb Well-Known Member

    Joined:
    Mar 13, 2003
    Messages:
    253
    Likes Received:
    2
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    One of our customer installed SSL on shared IP.

    Now any of our other customers visiting https://customer-domain.extn, they see the web site having SSL certificate installed.

    I found one solution is to ask every customer to install self signed SSL, but that is lot more work and complication. Cpanel documentation page says add an SSL entry for servers hostname, set it primary, so it will show up instead of some other web site.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Yes, installing a SSL certificate for the hostname on that IP address and making it the primary certificate is a valid workaround. This is separate from the SSL certificate utilized for services via the "WHM >> Manage Service SSL Certificates" option (unless you have a signed certificate you want to use). You can simply generate it via:

    "WHM Home » SSL/TLS » Generate an SSL Certificate and Signing Request"

    Then, install it via:

    "WHM Home » SSL/TLS » Install an SSL Certificate on a Domain"

    You can make it the primary certificate for the IP address via:

    "WHM Home » SSL/TLS » Manage SSL Hosts"

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice