Install AutoSSL cert without disrupting live site?

nivekau

• November 04, 2018 22:51

My undertstanding is that AutoSSL requires mod_rewrite rules to work. Like this: RewriteEngine on RewriteCond %{HTTPS} !=on RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$ RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Comodo\ DCV)?$ RewriteRule ^

• 

  linux4me2

  • November 05, 2018 20:31

  I use WHM > Tweak Settings > Domains > Use a Global DCV Passthrough instead of .htaccess modification (requires EA4) set to "On" instead of .htaccess modification for each site for AutoSSL. With that set, I haven't had any issues with adding AutoSSL certificates to live sites at all, and despite the caution in Tweak Settings, haven't noticed any performance penalty or increase in site load times with it enabled. You might give it a try and see how it works.

  0
• 

  nivekau

  • November 06, 2018 01:11

  I use WHM > Tweak Settings > Domains > Use a Global DCV Passthrough instead of .htaccess modification (requires EA4) set to "On" instead of .htaccess modification for each site for AutoSSL.

  
  Thanks linux4me2. Would I still need the http to https re-write in .htaccess ?

  0
• 

  nivekau

  • November 06, 2018 07:23

  I have enabled Global DCV Passthrough and my .htaccess file for the domain in question now reads: RewriteEngine on RewriteCond %{HTTPS} !=on RewriteRule ^

  0
• 

  cPanelLauren

  • November 06, 2018 15:11

  Hi @nivekau If a domain is getting that error in most cases it's because the domain has a DNS related issue. The forum post here: may be useful to you.

  0
• 

  linux4me2

  • November 06, 2018 15:43

  Thanks linux4me2. Would I still need the http to https re-write in .htaccess ?

  
  Yes, you should still include the HTTP to HTTPS redirect in case someone tries to access the site using an old HTTP link.

  0
• 

  nivekau

  • November 07, 2018 00:56

  Thanks linux4me2 Thanks also CpanelLauren, there was a DNS problem! I resolved that and Cpanel installed the SSL certitificate. All good now :-)

  0
• 

  cPanelLauren

  • November 07, 2018 12:45

  HI @nivekau I'm glad to hear you were able to find the cause! Thanks!

  0

Please sign in to leave a comment.