Skip to main content

CPANEL-40511 - SSL/TLS CONFIGURATION - how can we configure hostname SSL/TLS Configuration to RSA, 4,096-bit

Comments

4 comments

  • cPRex Jurassic Moderator
    Hey there! This page does also change the bit length for the hostname SSL. I changed the value to 4096 on my personal machine, reset my hostname SSL certificates, and then ran "/usr/local/cpanel/bin/checkallsslcerts" which showed this output: [WARN] The system will replace the old certificate (RSA, 2,048-bit) with a new certificate that matches the system"s default key type (RSA, 4,096-bit).
    Let me know if that helps!
    0
  • Spirogg
    reset my hostname SSL certificates, and then ran "/usr/local/cpanel/bin/checkallsslcerts"

    Hey there, Thanks for your reply When changing the RSA to a different one and clicking save, it runs the cPanel domains AutoSSL and updates them accordingly. But the hostname we have to reset ourselves ? Then rerun /checkallsslcerts? Also would be nice for it to run that for the hostname.
    0
  • cPRex Jurassic Moderator
    I don't disagree - I've created case CPANEL-40511 so our team can look into that possibility.
    0
  • Spirogg
    I don't disagree - I've created case CPANEL-40511 so our team can look into that possibility.

    PS just found this for AlmaLinux8 and CloudLinux8 you canlt set RSA to 4096 for When using AlmaLinux 8 or CloudLinux 8, after changing the SSL/TLS Key type in the WHM you find the Hostname AutoSSL service becomes stuck.
    0

Please sign in to leave a comment.