How to hide the "Purchase and Install an SSL Certificate" link in reseller's WHM?
Hello,
I have disabled the reseller privilege in WHM for " Account Management --> Purchase SSL Certificates (ssl-buy)". However, our resellers are still able to see the "Purchase and install an SSL Certificate" link in their WHM menu.
How can we disable this link? we sell SSL certificates ourselves, and we do not want our customers to go to cpanel to purchase their ssl certificate,
Thanks.
-
Hello, The cpanel store has is disabled in the WHM>>Market Provider Manager screen. However, this does not fix the problem. The problem is that my resellers can still click on the WHM " SSL/TLS " Purchase and Install an SSL Certificate menu option, and it shows links to cpanel. I do not our resellers to see that link at all in their WHM. It is confusing for them to see ssl certificates offered by cpanel, even if clicking the "Go to Cpanel" button just gives an error message. When I go into the "Home " Resellers " Edit Reseller Nameservers and Privileges screen I have disabled the "Account Management >> Purchase SSL Certificates" option... but this link is still shown in their WHM. How can we remove that purchase link in their WHM? 0 -
Hello! To remove the actual page Purchase and Install an SSL Certificate, this can be managed through the Edit Reseller Nameservers and Privileges interface. I tested this on my own VM by deselecting "Purchase SSL Certificates", saving the changes, and I'm no longer seeing the page populating within the WHM sub-menu (see attachment) This is what is currently configured for my reseller: [CODE=bash]# grep autorepairshop /var/cpanel/resellers autorepairshop:acct-summary,basic-system-info,basic-whm-functions,cors-proxy-get,cpanel-api,cpanel-integration,create-user-session,digest-auth,generate-email-config,list-pkgs,manage-api-tokens,manage-dns-records,manage-oidc,manage-styles,mysql-info,ns-config,public-contact,ssl-info,track-email
Are you able to provide us with the above output for the reseller you're working with?0 -
Yes, here it is: [root@earth ~]# grep financia /var/cpanel/resellers financia:acct-summary,add-pkg,allow-addoncreate,allow-parkedcreate,basic-system-info,basic-whm-functions,cors-proxy-get,cpanel-api,cpanel-integration,create-acct,create-user-session,demo-setup,digest-auth,edit-dns,edit-mx,edit-pkg,generate-email-config,kill-acct,limit-bandwidth,list-accts,list-pkgs,mailcheck,manage-api-tokens,manage-dns-records,manage-oidc,manage-styles,mysql-info,news,ns-config,passwd,public-contact,quota,show-bandwidth,software-ConfigServer-csf,software-JetBackup,software-lvemanager,ssl,ssl-gencrt,ssl-info,stats,status,suspend-acct,thirdparty,track-email,upgrade-account0 -
Hello, Thanks for the quick response! I copied over your current reseller privileges over to my test account, and sure enough, the Purchase and Install an SSL Certificate, page was populating. After some digging, it would appear that you would also need to have the SSL Site Management privilege disabled inside Edit Reseller Nameservers and Privileges for the reseller to lose access to that page. Are you able to complete these changes and let us know if you're still able to see the page? 0 -
Hello, Yes, that worked. Unchecking the SSL Site Management privilege removes the Purchase and Install an SSL Certificate as well as the Install an SSL Certificate on a Domain and Manage SSL Hosts links... We'd prefer to keep those last two links, however, that's ok, because I the reseller can still log into the end-user's cpanel to perform those actions when needed. (It just means the reseller can't do those tasks from within their WHM.) It looks like this might be a bug, though? I think if server admin disables the Purchase SSL Certificates reseller privilege, there is no reason to continue showing the Purchase and Install an SSL Certificate link and page. Perhaps that WHM link/page is associated with the incorrect privilege. 0 -
Greetings, It's important to note that these conditions are mentioned in the below documentation: SSL/TLS Wizard interface (cPanel >> Home >> Security >> SSL/TLS Wizard) for the user: - cPanel Market " market
- SSL Host Installer " sslinstall
- SSL/TLS Wizard " tls_wizard
However, I do understand where you're coming from and the importance of retaining Install an SSL Certificate on a Domain and Manage SSL Hosts links for the reseller to use. As such, I went ahead and submitted an improvement case for our developers to review by the ID of CPANEL-34379. In the event we push these changes, you'll find the updates within our changelog here:0 -
So I am trying to do the same for some of the users as they tend to break things often lol. Since I am taking care of as I do not want the user to be able to change certs, etc. Is there not way to get rid of it completely for specific users (without getting rid of it completely for all users with some code changes)? Maybe I missed something in the thread, but following the instructions disabled it for everyone for me 0
Please sign in to leave a comment.
Comments
8 comments