cPanel uapi to deploy a single certificate for multiple domains

glpanel

• June 24, 2018 15:53

Hello, I want to use cPanel uapi to deploy a single certificate for multiple domains and subdomains. If possible I"d like to know If with a single uapi command I can: 1) deploy a single certificate containing a domain and two subdomains (eg. example.com www.example.com cp.example.com or a wildcard *.example.com) 2) deploy a single certificate containing multiple domains (eg. aa.com bb.com cc.com dd.com) I hope someone can suggest something. Thank You.

• 

  cPanelMichael

  • June 26, 2018 16:28

  Hello @glpanel, The following UAPI function is available for installing a SSL certificate:

  0
• 

  glpanel

  • June 27, 2018 20:41

  Hi Michael, thank you for your reply. "You'd need to install it for each domain name individually" means that to install the certificate of example N"1 I only need a single uapi command, while for example N"2 I must generate four certificates for each domain and install them with four uapi commands ? As for AutoSSL, I understand that it is a sort of user interface to automate the installation of certificates issued by Let's Encrypt or other certificate authority, in this case my hosting provider has not enabled this cPanel module.

  0
• 

  cPanelMichael

  • June 28, 2018 15:15

  "You'd need to install it for each domain name individually" means that to install the certificate of example N"1 I only need a single uapi command, while for example N"2 I must generate four certificates for each domain and install them with four uapi commands ?

  
  Hello @glpanel, It depends on the type of certificate you are installing. For instance, is it a standard SSL certificate that covers a single domain name, a wildcard SSL certificate, or a multi-domain (UCC) certificate? Thank you.

  0
• 

  glpanel

  • June 28, 2018 20:14

  I want to install a standard certificate that covers a domain and subdomain like example.com www.example.com

  0
• 

  cPanelMichael

  • June 29, 2018 14:16

  I want to install a standard certificate that covers a domain and subdomain like example.com

  0
• 

  cPanelFelipe

  • August 08, 2018 16:07

  Quick clarification: install_ssl does NOT install certificates onto "domains" per se; rather, it first installs them onto Apache httpd virtual hosts and then creates appropriate entries for non-httpd SSL services (e.g., Dovecot, Exim, cpsrvd, "). Consider a case where "example.com" and "haha.org" share an Apache virtual host. While install_ssl will accept either of those domain names, it"s not possible to have separate SSL certificates for the two domains; an installation for one will overwrite the installation for the other. Thus, the only way to secure both domains is to have a certificate that matches both domains. This is all because Apache httpd associates SSL certificates with virtual hosts, not with domain names. It"s an unfortunate design that creates a lot of confusion.

  0
• 

  glpanel

  • August 08, 2018 17:03

  Quick clarification: install_ssl does NOT install certificates onto "domains" per se ...

  
  Hi Felipe, thank you for this useful clarification. I"ve successfully installed three separate RSA certificates on three of my domains using cPanel Uapi, but my domains are not sharing Apache virtual hosts. Previously,

  0

Please sign in to leave a comment.