AutoSSL reduction of coverage

PortStone

• April 28, 2018 09:34

Hello, Today I got the following error: The validation required 1 HTTP redirect, but the AutoSSL provider "cPanel (powered by Comodo)" does not permit HTTP redirects. When the system accessed the "http://mydomain.tld/.well-known/pki-validation/xxxxxxxxxxxxxxxxxxxx.txt" URL, it redirected to the "https://mydomain.tld/.well-known/pki-validation/xxxxxxxxxxxxxxxxxxxx.txt" URL.
that is because of HTTPS redirects in VirtualHost but if I remove it, my Domain wouldn't redirect to HTTPS anymore. So how should I fix this? Kind Regards PortStone

• 

  cPanelMichael

  • April 30, 2018 15:24

  that is because of HTTPS redirects in VirtualHost but if I remove it, my Domain wouldn't redirect to HTTPS anymore. So how should I fix this?

  
  Hello, Do you have the Use a Global DCV Passthrough instead of .htaccess modification (requires EA4) option enabled under the Domains tab in WHM >> Tweak Settings? If not, you'll need to enable that option or exclude the DCV requests from the redirect conditions by adding the following entries to your existing rules in the VirtualHost include file: # For cPanel"s internal DCV checks: RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$ RewriteCond %{REQUEST_URI} !^/\.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$ # For Comodo: RewriteCond %{REQUEST_URI} !^/[A-F0-9]{32}\.txt$ RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$ # For Let"s Encrypt: RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
  Thank you.

  0
• 

  PortStone

  • April 30, 2018 16:48

  Hello, okay thank you.

  0

Please sign in to leave a comment.