Creating combined SSL certificate from cPanel generated individual sub-domains

BassTeQ

• September 13, 2021 02:25

Hi, I've been using the below method to create CA bundle certificate from a cpanel generated subdomain. What I'd like to know, is how I create a single key and single bundle file that covers multiple subdomains? [CODE=perl] my $output = `uapi --user=username SSL fetch_cert_info id=$certname 2>/dev/null`; my $yaml = YAML::Tiny->read_string($output); my $fh; print "Updating Key: $main_key from [$cert]\n"; open($fh, ">$main_key") or die("Can't open for write $main_key, $!"); print $fh $yaml->[0]->{result}->{data}->{key}."\n"; close($fh); print "Updating Bundle Key: $bundle_key\n"; open($fh, ">$bundle_key") or die("Can't open for write $bundle_key, $!"); print $fh $yaml->[0]->{result}->{data}->{key}."\n"; print $fh $yaml->[0]->{result}->{data}->{certificate}."\n"; print $fh $yaml->[0]->{result}->{data}->{cabundle}."\n"; close($fh);
Thanks

• 

  cPJustinD

  • September 13, 2021 16:50

  Hey there! To my understanding, you would need a wildcard certificate to accomplish this, and this would only cover the domain's subdomains, not all subdomains on the server. You can find more information on generating a CSR to request a wildcard from a Certificate Authority here:

  0
• 

  BassTeQ

  • September 13, 2021 22:33

  Hey there! To my understanding, you would need a wildcard certificate to accomplish this, and this would only cover the domain's subdomains, not all subdomains on the server. You can find more information on generating a CSR to request a wildcard from a Certificate Authority here:

  0
• 

  cPJustinD

  • September 14, 2021 13:35

  Hello again! Wildcard certificates renewals via 3rd party providers would require removing the old certificate and replacing it with the new certificate details, which is not handled automatically. If the certificate was purchased via the cPanel store, the process is still the same but handled automatically. You can enable the cPanel Store in WHM " Market " Market Provider Manager. Then you can purchase a wildcard certificate for the domain from within the cPanel account using the SSL/TLS interface. Additionally, I wanted to mention a free wildcard SSL option available, but it does have a few caveats. You can find more on the free wildcard SSLs here:

  0
• 

  BassTeQ

  • September 14, 2021 22:11

  Thanks, I didn't want to have to purchase the certificate, will look into the Lets Encrypt link, cheers!

  0

Please sign in to leave a comment.