Website Loads the Content of another website if ssl is not installed

[azadhussnain]

Hello ! I am facing an weird issue in my server.
Actually, Yesterday one customer purchased hosting from me but when i open his website ( suppose example.com ) then it shows the content of another website hosted on my same server ( suppose example2.com ).
and when i open example.com with https:// then my chrome browser shows an SSL error that example.com is using ssl from *.example2.com

and when i installed SSL on example.com then it's working properly and loading the content of example.com

i think it's an SSL issue , i am using Let's Encrypt AutoSSL
anyone can tell me how to fix this issue? because it looks weird .

 

[hmaddy]

Remove old ssl certificates.

 

[kodeslogic]

If the accounts example and example2 are assigned a shared IP address, and a SSL certificate is installed on example2.com only, then any secure request to a domain name example.com on that IP address will load the contents of the domain name the certificate is installed for(example2.com). This is by default behavior.

 

[cPRex]

As @kodeslogic says, this is default behavior for Apache. You can find more details on this here:

A domain on our server is loading the SSL of another unrelated domain

Symptoms Attempting to load an SSL returns a different domain website. Description This issue can happen for a variety of reasons. The most common cause is the IP mismatch between domains. Third...

support.cpanel.net

 

[Kent Brockman]

Hi there, I'm investigating this. The hostname certificate should be made Primary by default. Always.
What prevents cPanel from doing this automagically and avoiding the bad behaviour to the end users?

 

[cPRex]

@Kent Brockman - you'd actually be surprised how many people don't want that to happen. You can configure the default SSL host using the details here:

https://support.cpanel.net/hc/en-us/articles/1500005458561-How-to-set-the-default-HTTPS-VirtualHost

 

[Kent Brockman]

@Kent Brockman - you'd actually be surprised how many people don't want that to happen.

Ok, I think I can understand why. But when it comes to a reseller, showing an unrecognized domain by default is completely puzzling for them and their end users. This should be more intuitively explained and highlighted in the Tweak Settings, at the very least...

You can configure the default SSL host using the details here:

https://support.cpanel.net/hc/en-us/articles/1500005458561-How-to-set-the-default-HTTPS-VirtualHost

Yes, I did that, and it works nice ONLY when your server has just one IP address AND the damn Sectigo thing have worked to provide the hostname with a valid SSL.
Those things are a bit messy and you guys should work it out a bit more.

 

[cPRex]

You can set a default host for each IP address with the details here: https://support.cpanel.net/hc/en-us...et-a-default-VirtualHost-for-each-IP-address-