Website Loads the Content of another website if ssl is not installed

azadhussnain

• February 24, 2021 22:19

Hello ! I am facing an weird issue in my server. Actually, Yesterday one customer purchased hosting from me but when i open his website ( suppose example.com ) then it shows the content of another website hosted on my same server ( suppose example2.com ). and when i open example.com with https:// then my chrome browser shows an SSL error that example.com is using ssl from *.example2.com and when i installed SSL on example.com then it's working properly and loading the content of example.com i think it's an SSL issue, i am using Let's Encrypt AutoSSL anyone can tell me how to fix this issue? because it looks weird .

• 

  hmaddy

  • February 25, 2021 05:26

  Remove old ssl certificates.

  0
• 

  kodeslogic

  • February 25, 2021 07:16

  If the accounts example and example2 are assigned a shared IP address, and a SSL certificate is installed on example2.com only, then any secure request to a domain name example.com on that IP address will load the contents of the domain name the certificate is installed for(example2.com). This is by default behavior.

  0
• 

  cPRex Jurassic Moderator

  • February 25, 2021 14:21

  As @kodeslogic says, this is default behavior for Apache. You can find more details on this here:

  1
• 

  Kent Brockman

  • July 23, 2023 02:22

  Hi there, I'm investigating this. The hostname certificate should be made Primary by default. Always. What prevents cPanel from doing this automagically and avoiding the bad behaviour to the end users?

  0
• 

  cPRex Jurassic Moderator

  • July 24, 2023 13:16

  @Kent Brockman - you'd actually be surprised how many people don't want that to happen. You can configure the default SSL host using the details here:

  1
• 

  Kent Brockman

  • July 24, 2023 20:41

  @Kent Brockman - you'd actually be surprised how many people don't want that to happen.

  
  Ok, I think I can understand why. But when it comes to a reseller, showing an unrecognized domain by default is completely puzzling for them and their end users. This should be more intuitively explained and highlighted in the Tweak Settings, at the very least...

  You can configure the default SSL host using the details here:

  0
• 

  cPRex Jurassic Moderator

  • July 25, 2023 11:50

  You can set a default host for each IP address with the details here:

  1

Please sign in to leave a comment.