[Tutorial] How to install SSL on hostname?

I will add more pictures.
<a href="https://ibb.co/Z6QWv5M"><img src="https://i.ibb.co/VWF2bRq/01.png" alt="01" border="0"></a>
<a href="https://ibb.co/tM2FRLj"><img src="https://i.ibb.co/rGpN9d8/02.png" alt="02" border="0"></a>
<a href="https://ibb.co/8Xfgvrq"><img src="https://i.ibb.co/SJMwYtb/03.png" alt="03" border="0"></a>

2087 and 2083 are handled by the cwp version of nginx itself (/usr/local/cwpsrv/)

Whereas your third picture is run by apache/nginx (Whichever you use). 

Do the following:
grep cert /usr/local/cwpsrv/conf/cwpsrv.conf   Copy the 2 lines

FOr Apache:
nano /usr/local/apache/conf.d/hostname-ssl.conf
Find all instances of SSLCertificateFile and SSLCertificateKeyFile and point them to the cert above:

For Nignx:
 nano /etc/nginx/conf.d/hostname-ssl.conf
Find all Instances of ssl_certificate and ssl_certificate_key and point them to the cert above

After making the changes, systemctl restart httpd and nginx -s reload

Thank you very much,
Can you show me how to do it in detail, because I'm not familiar with it, I just installed CWP.
Please sympathize.
I switched back to using only Apache.

this working, tnx

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code: [Select]

service cwpsrv reload
THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

I think this is the "secret sauce" of this method. For whatever reason, LE or CWP seems to prefer actual A records. CNAME records tend to fail. So for instance, the "service" hostnames such as mail, ftp, cpanel, webmail need to be A records in your DNS setup, NOT CNAME alias records.