Creating CSR results in "You do not control this domain."

jndawson

• February 26, 2016 13:04

Trying to help a customer install an SSL cert for his webmail.example.com hostname via the customer's cPanel portal. After creating a private key, the CSR can't be created for webmail.customer.com due to a "You do not control this domain." error. When just entering customer.com into the CSR 'Domains' field, there is no error. When entering example.com, there is no error. When creating the CSR via WHM, there is no error. Why? (Side note - we have several customers that are slightly aggravated they can't install an SSL cert on their webmail hostnames and have to default to the webmail.server.com hostname. It would be nice for customers to have the same option for all of their hostnames.)

• 

  jndawson

  • February 27, 2016 00:43

  Some more info: We tried installing the cert via WHM. Here's the error:
  The domain "webmail.customer.com" is not managed on this server. You must specify an IP address to install SSL for "webmail.customer.com" or set up this domain on a new account, or create it as parked domain, a subdomain, or an addon domain of an existing account, and try again.
  The account is on a shared IP - could that be the issue?

  0
• 

  jndawson

  • February 27, 2016 01:22

  The account is on a shared IP - could that be the issue?

  
  No. That's not the issue. Changing IPs did nothing. Same error messages.

  0
• 

  cPanelMichael

  • February 29, 2016 14:37

  Hello :) Could you elaborate on the purpose of this SSL certificate? Is it to enable SSL for their specific domain name when the customer accesses webmail, or is it simply a SSL certificate for a subdomain that website visitors access independently? Are proxy subdomains enabled on this server? Thank you.

  0
• 

  jndawson

  • February 29, 2016 17:36

  Could you elaborate on the purpose of this SSL certificate? Is it to enable SSL for their specific domain name when the customer accesses webmail, or is it simply a SSL certificate for a subdomain that website visitors access independently? Are proxy subdomains enabled on this server?

  
  I realize my question doesn't make sense because some of the example domain names I used to differentiate got morphed into 'example.com', which confuses the reader. Let's try customer.tld and server.tld for the customers' and our domains, respectively. Customer has a domain, customer.tld, and they want to use an ssl cert for webmail.customer.tld because they don't want to use the generic webmail.server.tld. Neither the WHM nor the cPanel interface allow installing an SSL cert on the 'webmail' hostname, whether there's an IP assigned or not. Please define 'proxy subdomain' and where one would 'enable' this, and then I can answer your question.

  0
• 

  cPanelMichael

  • March 14, 2016 21:46

  Customer has a domain, customer.tld, and they want to use an ssl cert for webmail.customer.tld because they don't want to use the generic webmail.server.tld. Neither the WHM nor the cPanel interface allow installing an SSL cert on the 'webmail' hostname, whether there's an IP assigned or not.

  
  I believe this is answered in the following thread: SSL for proxy subdomain or redirection? In addition, there's a document you may find helpful at: Proxy Subdomains Use the cPanel Service SSL - cPanel Knowledge Base - cPanel Documentation Thank you.

  0

Please sign in to leave a comment.