mTLS for the Entire cPanel Account
I plan to enable mTLS for all domains in my cPanel account. I know how to do this. My question is, since namservers, SMTP and server hostnames are subdomains of my cPanel's main domain, will they also be subject to mTLS - do I need to exempt them?
-
Hey there! I think the better question here would be how exactly you are implementing this, as this isn't something that is directly supported in cPanel. If I knew how you were planning to set that up I could get you more details.
0 -
I'm using Cloudflare as an edge server for mTLS:
- Create my own self-signed certs.
- Upload them to Cloudflare.
- Set my server to require a cert from Cloudflare. I do that by putting directives in /etc/apache2/conf.d/userdata/ssl/2_4/[user]/*.conf so that it is applied to my entire cPanel account.
To repeat my question:
Nameservers, SMTP, and server hostnames are subdomains of my cPanel's main domain. Will they also be subject to mTLS. Do I need to exempt them by creating VirtualHosts for them and adding directives to them?
Question also stands for IPs.
0 -
This one I honestly don't know as you're in uncharted territory. Since cPanel doesn't explicitly support this it's not something we test, so I can't say how it will behave.
Would you like me to submit a feature request on your behalf for official support of mTLS?
1 -
Please do, thank you. A side note. I'm creating a custom VirtualHost configuration due to the issues mentioned. I've been stuck for a whole week now. Do you think it would be best to submit a ticket and ask for help there? Because it's an extensive, specific thing. Do you think they can help?
0 -
Oh definitely - you should always feel free to submit a ticket if you get stuck!
I did submit that request through our feature site and I'll bring it up with the team during our meeting next week.
1 -
Great! What happened to the old Feature request site? I had an account there and some requests of my own. I'm guessing it's gone now?
0 -
The old features site has been gone for nearly two years now, but the modern one provides us with no only a way to collect feedback but a roadmap for clients as well.
1 -
That's exactly how long I have been away from the project. :) Good to hear. I have already engaged in topics.
0 -
If you'd like to read a bit more about the features process I handle now, check it out here! https://support.cpanel.net/hc/en-us/community/posts/28627696566935-features-cpanel-net-overview-and-our-process
1 -
Update - I did speak with the team and let the email manager know about your desire for mTLS. If I hear anything else I'll be sure to post!
1 -
Update - the email team talked amongst themselves and at this time this isn't something we're going to add to cPanel. If we get other requests for this in the future that could change, but right now we aren't seeing much demand for this one.
1 -
Thank you very much!
Since I didn't purchase a license directly from cPanel, and for most customizations, my hosting and cPanel provider says they don't help with them, what are my options, where can I find help?
0 -
I suppose it would depend *what* those customizations are. If it's something that you can do in the cPanel or WHM interfaces, or through tools like Apache includes, your host should absolutely be helping you handle that. If they aren't able to resolve a technical question they should escalate the problem to us so we can handle it.
If your host isn't doing that, please message cs@cpanel.net to get in touch with our customer service team as we'd like to hear about it, but your license provider is the contact for all support issues for non-direct licenses.
1
Please sign in to leave a comment.
Comments
13 comments