How to generate Hostname SSL without AutoSSL

gwen_the_hen

• September 03, 2016 12:37

Hello, One of my servers recently emailed me an SSL certificate for the hostname, which I installed and has been working great. AutoSSL is disabled on this server. I now have a new server where this hasn't happened, and I can't find any way to generate the SSL for the server's hostname. Can anyone help?

• 

  Infopro

  • September 03, 2016 17:51

  Is this what you're looking for? WebHost Manager "Service Configuration "Manage Service SSL Certificates As a Reseller Owner, you might not have access to these settings.

  0
• 

  gwen_the_hen

  • September 04, 2016 09:11

  Hello, I've had a look through there but there aren't any certificates for the hostname. I can see certificates for the default hostname (this is what the server came with but I updated it to my own hostname almost immediately, and that was a couple of months ago). I think I must have selected 'Reseller Owner' by mistake, I rent the VPS myself from Heart Internet. Thanks for the response.

  0
• 

  cPanelMichael

  • September 05, 2016 18:33

  I now have a new server where this hasn't happened, and I can't find any way to generate the SSL for the server's hostname. Can anyone help?

  
  Hello, Free cPanel-signed certificates for the hostname are generated as of cPanel 56. Here's the relevant quote from the New in version 56

  Revoked. " New in version 56

  Self-signed.

  Invalid (For example, your server's hostname must be valid and resolve in DNS).

  Expires in less than one week. Note: Comodo" cross-signs these cPanel-signed certificates for additional security. Your server will automatically order the free signed certificate when the server runs the /usr/local/cpanel/bin/checkallsslcerts tool as part of the upcp maintenance script and connects to the license server. The server will download and install the certificate when it is available. When that signed certificate is less than seven days from expiration, your server will automatically order a replacement free signed certificate. The server will download and install the certificate when it is available. Otherwise, if the signed certificate expires, the server will install a self-signed certificate, and then replace that certificate with the free signed certificate when it is ready. If you wish to replace your services certificate with one from another provider, use WHM's .
  Could you verify which version of cPanel is installed on this system, and that /var/cpanel/ssl/disable_auto_hostname_certificate doesn't exist as a file on the system?
  cat /usr/local/cpanel/version stat /var/cpanel/ssl/disable_auto_hostname_certificate
  Thank you.

  0
• 

  gwen_the_hen

  • September 05, 2016 19:26

  Hi, I've checked and that file isn't there. It does look like the certificate has been generated, but it seems to be for the main domain rather than the server itself. The hostname is [removed] but the only SSL I can see generated by cPanel is for [Removed] I'm running 11.58.0.25 according to the command you provided. Thanks.

  0
• 

  cPanelMichael

  • September 06, 2016 22:15

  Do you have access to Manage2 as a license holder? If so, check to see if the installation of free cPanel-signed hostname certificates is disabled via "Manage2 >> Dashboard >> Company >> Update Company Information". Otherwise, please report this issue to your license provider to determine if that feature is disabled. Thank you.

  0
• 

  gwen_the_hen

  • September 07, 2016 08:14

  Hello, Apparently this feature is enabled. It looks like the SSL has been issued, but it's been issued to the full domain, rather than the sub-domain that is set up as my hostname. The hostname is server.example.com but the cPanel issued SSL has been issued to example.com. I have checked on a different server which doesn't have this problem and I can see that the SSL has been issued correctly to the sub-domain (see attached screenshot). Can you advise further? Thank you.

  0
• 

  cPanelMichael

  • September 07, 2016 15:22

  Could you open a support ticket using the link in my signature so we can take a closer look and determine why that's happening? You can post the ticket number here so we can update this thread with the outcome. Thank you.

  0
• 

  gwen_the_hen

  • September 08, 2016 08:49

  Got it sorted: "The reason your server was not provisioned a new certificate is because there's already a "trusted" certificate for your server, which expireson September 7th, 2017. If you wish to use a cPanel-provided hostname certificate, please navigate to WHM -> Service Configuration -> Manage Service SSL Certificates, and reset all 4 service groups certificates, and then navigate to WHM -> cPanel -> Upgrade to the Latest Version and perform an update. " I had installed a different certificate when I was messing around with stuff, and this was blocking the cPanel issued one. Thank you for your help. Also, can I remove the attachment from my previous post as it contains details of my installation?

  0
• 

  Infopro

  • September 08, 2016 09:08

  I've removed the attachment for you.

  0
• 

  gwen_the_hen

  • September 08, 2016 09:09

  Great, thanks for all your help.

  0

Please sign in to leave a comment.