SSL and VirtualHost

Framoh76

• December 17, 2020 04:40

Hi There, i've setup 2 virtualhosts on Apache 2.4 for 2 subdomains. The 2 vhosts are responding ok but not with SSL secured. I've created a Let's encrypt certificate for the domain and using WHM Install an SSL Certificate on a domain, i'm trying to install the SSL on the domain and also on the subdomain.... Once done, it says that my domain is now secured, but accessing it from outside using a web browser, i still have a message stating my site is not secured. I've restarted apache, rebooted the server.... What i'm missing ?

• 

  cPRex Jurassic Moderator

  • December 17, 2020 14:54

  Hey there! It sounds like you've done everything right, especially if you are getting a positive confirmation on the "Install an SSL Certificate on a Domain" page in WHM. It might be good to manually check the Apache configuration file at /etc/apache2/conf/httpd.conf to ensure the 443 secure vhost is being created there. Other than that, there isn't much testing advice I can offer without knowing the domain name. Is it possible your local browser has cached the non-SSL data? Could you try from a different network, such as a phone, to see if that changes the behavior?

  0
• 

  Framoh76

  • December 17, 2020 15:08

  Hi many thanks for your reply. I've just tried from my mobile phone, but same problem....

  0
• 

  Framoh76

  • December 17, 2020 15:37

  I've just checked and the VirtualHost are inside the /etc/apache2/conf/httpd.conf ServerName domain.com ServerAlias domain.com DocumentRoot /var/www/html ServerAdmin ='webmaster@etscaf.online'>webmaster@domain.com UseCanonicalName Off ## User nobody # Needed for Cpanel::ApacheConf UserDir disabled UserDir enabled nobody # Enable backwards compatible Server Side Include expression parser for Apache versions >= 2.4. # To selectively use the newer Apache 2.4 expression parser, disable SSILegacyExprParser in # the user's .htaccess file. For more information, please read: # SSILegacyExprParser On SecRuleEngine Off suPHP_UserGroup nobody nobody ScriptAlias /cgi-bin/ /var/www/html/cgi-bin/ SSLEngine on SSLCertificateFile /var/cpanel/ssl/apache_tls/domain.com/combined SSLUseStapling off SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown SSLOptions +StdEnvVars Include "/etc/apache2/conf.d/userdata/ssl/2_4/nobody/domain.com/*.conf" # To customize this VirtualHost use an include file at the following location # Include "/etc/apache2/conf.d/userdata/ssl/2_4/nobody/domain.com/*.conf" ServerName domain.com ServerAlias domain.com DocumentRoot /var/www/html ServerAdmin ='webmaster@www-dev.etscaf.online'>webmaster@domain.com UseCanonicalName Off ## User nobody # Needed for Cpanel::ApacheConf UserDir disabled UserDir enabled nobody # Enable backwards compatible Server Side Include expression parser for Apache versions >= 2.4. # To selectively use the newer Apache 2.4 expression parser, disable SSILegacyExprParser in # the user's .htaccess file. For more information, please read: # SSILegacyExprParser On SecRuleEngine Off suPHP_UserGroup nobody nobody ScriptAlias /cgi-bin/ /var/www/html/cgi-bin/ SSLEngine on SSLCertificateFile /var/cpanel/ssl/apache_tls/domain.com/combined SSLUseStapling off SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown SSLOptions +StdEnvVars # To customize this VirtualHost use an include file at the following location # Include "/etc/apache2/conf.d/userdata/ssl/2_4/nobody/domain.com/*.conf"

  0
• 

  cPRex Jurassic Moderator

  • December 17, 2020 17:29

  Thanks for those details - I probably should have specified that it's best to not include the details publicly for security reasons, so I edited that last post. I do also see a self-signed certificate on my end as well. If you don't have any additional tools, such as Cloudflare or Nginx, it would be best to get a ticket opened with our team so we can check that directly and see what the issue could be. If you do create a ticket, please post the number here so I can follow that and keep everyone updated with the progress.

  0

Please sign in to leave a comment.