Skip to main content

How to change the ssl certificate

aespinal
I am trying to configure the ssl certificate for WHM. All the domains work just fine with https:// but not the whm. The server (ns7.example.net) shows the old certificate, no the new one from cPanel. When I try to configure it, I check -->Calendar, cPanel, WebDisk, Webmail, and WHM Services and select the new cPanel certificate for the domain I use (example.net) but not the ns7.example.net It does not work. Please help.

Comments

10 comments

Date Votes
  • cPanelLauren
    Hello @aespinal If you go to WHM>>Service Configuration>>Manage SSL certificates do you see the old certificate listed as installed? Also if you do see the old certificate and you run the following command: /usr/local/cpanel/bin/checkallsslcerts
    Does it give you any errors?
    0
  • aespinal
    Pardon my ignorance: How do I run the command?
    0
  • cPanelLauren
    You'd have to access the server using SSH or use the terminal application at WHM>>Server Configuration >>Terminal
    0
  • aespinal
    You'd have to access the server using SSH or use the terminal application at WHM>>Server Configuration >>Terminal

    This is the result: The system will check for the certificate for the "cpanel" service. The system will attempt to verify that the certificate for the "cpanel" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "cpanel" service passed all checks. The system will check for the certificate for the "dovecot" service. The system will attempt to verify that the certificate for the "dovecot" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "dovecot" service passed all checks. The system will check for the certificate for the "exim" service. The system will attempt to verify that the certificate for the "exim" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "exim" service passed all checks. The system will check for the certificate for the "ftp" service. The system will attempt to verify that the certificate for the "ftp" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "ftp" service passed all checks. [root@s107-180-78-177 ~]#
    0
  • cPanelLauren
    Hi @aespinal Is your hostname s107-180-78-177.example.net? That's what your server thinks its hostname is. So if you're trying to provision a certificate for the hostname ns7.example.net, that needs to be the server's hostname. You can change the hostname by going to WHM>>Networking Setup>>Change Hostname Once the hostname is changed I would try running the script again
    0
  • aespinal
    I did run the script. It shows all passed, but, the old certificate still shows... The system will check for the certificate for the "cpanel" service. The system will attempt to verify that the certificate for the "cpanel" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "cpanel" service passed all checks. The system will check for the certificate for the "dovecot" service. The system will attempt to verify that the certificate for the "dovecot" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "dovecot" service passed all checks. The system will check for the certificate for the "exim" service. The system will attempt to verify that the certificate for the "exim"service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "exim" service passed all checks. The system will check for the certificate for the "ftp" service. The system will attempt to verify that the certificate for the "ftp" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "ftp" service passed all checks. [root@ns7 ~]#
    0
  • cPanelLauren
    Hi @aespinal It's for some reason not seeing the certificate as being invalid for the hostname. If you go to WHM>>Service Configuration>>Manage Service SSL certificates and look at the "Certificate" properties section does it show the current hostname or the old hostname? Thanks!
    0
  • aespinal
    Before I start getting help from you, many days ago, I did try to put the certificate. It asked which certificate install and selected domain.net It shows domain.net
    0
  • cPanelLauren
    Before I start getting help from you, many days ago, I did try to put the certificate. It asked which certificate install and selected domain.net It shows domain.net

    Hi @aespinal That explains why it thinks it's ok I believe, but that shouldn't be a cert for a domain name it should be the one for your hostname if you click reset certificate there for all the services then ask it to checkallssls once more does it provision the correct certificate?
    0
  • aespinal
    With that option, it indicates This action will install a new generated key and self-signed certificate for the "FTP Server" service. (The certificate will cover the domain "ns7.itsaudiovideo.net".) If you proceed with this reset, obtain another certificate from a valid Certificate Authority to replace the self-signed certificate as soon as possible. Are you sure that you want to reset the SSL certificate for "FTP Server"? You cannot undo this operation!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post