Skip to main content

How to get cPanel to add SSL to domain again?

Scott Galambos
I added an add-on domain. It tried to add the WHM built-in SNI SSL cert which is good. But the DNS resolved to the wrong IP by chance so the web site always comes up with an SSL cert invalid error. How do I fix this? I went into WHM -> Manage SSL Hosts and deleted the SSL cert for the domain. HOw do I tell cPanel to readd it now that I have the DNS resolving properly for the new add-on domain? Its not coming up in the Pending Queue for Manage AutoSSL.

Comments

3 comments

Date Votes
  • martin MHC
    From the WHM main menu: Go to Manage AutoSSL ==> Manage Users ==> Select the user you want to add ==> Check the tickbox ==> Click the button saying "Enable AutoSSL on 1 User" . Then check the logs tab to see that it worked.
    0
  • Scott Galambos
    Thanks, but the user already has AutoSSL enabled. And it is working. What I am trying to do is move one domain & site. But I am trying to move the site first to make sure it works and leave the DNS for the domain pointing to the old site until its confirmed working. So I update my local hosts file to point to the cPanel server to make sure the moved site works. This is fine, except for SSL because AutoSSL (on the cPanel server) I guess is trying to verify & install the cert for the domain but the domain is resolving to the old IP still as expected. It doesn't like this so it fails. "The domain whatever.com resolved to an IP address "y.y.y.y" that does not exist on this server." Because only my local hosts file points to the new IP of x.x.x.x, not the global DNS yet. Any way around this? I guess the AutoSSL failure is because an external server is generating the certs (and looking up the IP) and giving the cert to my cPanel server. Because I also forced the x.x.x.x domain in /etc/hosts in the cpanel server but that doesn't cut it either.
    0
  • cPanelMichael
    Hello, The domain validation process for the certificate will fail if the domain name is not resolvable to an IP address associated with the cPanel server it exists on. You will need to wait until the domain name resolves to the cPanel server before the certificate installation will succeed. Thank you.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post