SSL not working on www
Since the AutoSSL section was updated there is a flaw in the system.
Once you become aware that autoSSL no longer works due to needing the user to accept Lets Encrypt terms etc, you discover that when generating the certificate for the main domain www is not included in the certificate.
We then can't generate this as www is not an option in the list, only domain.* which of course fails DVC validation if only the A records point to the server.
After 2 hours wasted on this we found that the only way around it was to temporarily reenable the AutosSSL, for anyone reading this:
1 - Add file (if not already present) to /var/cpanel called panel.ini
2 - Add to the file
[global]
autossl.exclude_new_domains = false
3 - Save and then add your domain. AutoSSL will generate the certificates the old way and also include www.
You can then remove the above file again (or leave it there if you as the hosting company take responsibility for your customers being advised of the LetsEncrypt terms)
Hope this issue is fixed asap as it will become a pain in the....
-
Hey there! This is a known issue that we're working to fix as part of this case:
https://support.cpanel.net/hc/en-us/articles/39905733889943-AutoSSL-excludes-www-for-new-accounts
There is also a workaround listed there you can run to resolve this on a per-domain basis, but the upcoming fix will take care of things globally for you.
0 -
The remove excluded domains workaround didn’t work for me but the one in my post did.
Look forward to the fix soon though 👍1
Please sign in to leave a comment.
Comments
2 comments