Author Topic: [Tutorial] How to install SSL on hostname?  (Read 3220 times)

0 Members and 1 Guest are viewing this topic.

Offline
***
[Tutorial] How to install SSL on hostname?
« on: May 05, 2019, 09:03:16 AM »
Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell
Code: [Select]
service cwpsrv reload
THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #1 on: May 06, 2019, 03:39:13 PM »
This is my error.

AutoSSL: Issue Failed![Mon May  6 17:35:28 CEST 2019] Single domain='panel.betahostserver.com'
[Mon May  6 17:35:28 CEST 2019] Getting domain auth token for each domain
[Mon May  6 17:35:30 CEST 2019] Getting webroot for domain='panel.betahostserver.com'
[Mon May  6 17:35:30 CEST 2019] Verifying: panel.betahostserver.com
[Mon May  6 17:35:33 CEST 2019] Pending
[Mon May  6 17:35:36 CEST 2019] Pending
[Mon May  6 17:35:38 CEST 2019] Pending
[Mon May  6 17:35:40 CEST 2019] Pending
[Mon May  6 17:35:43 CEST 2019] Pending
[Mon May  6 17:35:46 CEST 2019] Pending
[Mon May  6 17:35:48 CEST 2019] Pending
[Mon May  6 17:35:51 CEST 2019] Pending
[Mon May  6 17:35:53 CEST 2019] panel.betahostserver.com:Verify error:DNS problem: SERVFAIL looking up CAA for betahostserver.com
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log

In /root/.acme.sh/acme.sh.log  is

[Mon May  6 17:35:53 CEST 2019] skip dns.
[Mon May  6 17:35:53 CEST 2019] _on_issue_err
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Mon May  6 17:35:53 CEST 2019] url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] payload='{}'
[Mon May  6 17:35:53 CEST 2019] POST
[Mon May  6 17:35:53 CEST 2019] _post_url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Mon May  6 17:35:54 CEST 2019] _ret='0'
[Mon May  6 17:35:54 CEST 2019] code='400'


Offline
***
Re: [Tutorial] How to install SSL on hostname?
« Reply #2 on: May 07, 2019, 11:09:16 AM »
It seems that you have not A record for panel.betahostserver.com.

So, kindly go to DNS manager and add an A record for panel with server IP.

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #3 on: May 13, 2019, 10:01:35 AM »
Excellent tutorial jamshed_206, thank you very much, I have had problems lately with this topic and now I have it much clearer. ;)
In the breach "que antivirus comprar", great.

Offline
***
Re: [Tutorial] How to install SSL on hostname?
« Reply #4 on: May 13, 2019, 10:44:03 AM »
Excellent tutorial jamshed_206, thank you very much, I have had problems lately with this topic and now I have it much clearer. ;)

I am happy to see you happy. Enjoy the CWP and if you have any issue, contact me.

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #5 on: May 25, 2019, 09:15:53 PM »
Followed the tutorial and still no green padlock!

Offline
***
Re: [Tutorial] How to install SSL on hostname?
« Reply #6 on: May 27, 2019, 01:22:36 AM »
Followed the tutorial and still no green padlock!

Can you send me your hostname.

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #7 on: May 30, 2019, 03:27:02 PM »
I followed these instructions and without success, I went and obtained a Comodo SSL Certificate but cannot even add that to the server.


[root@hostsrv ~]# service cwpsrv reload
Redirecting to /bin/systemctl reload cwpsrv.service
[root@hostsrv ~]#

No errors

But when I go tot he site the browser keeps saying : 
This site is not secure

And in Opera I can't even override it as I can with MS Explorer

Any suggestions?

Offline
***
Re: [Tutorial] How to install SSL on hostname?
« Reply #8 on: May 30, 2019, 04:02:53 PM »
I followed these instructions and without success, I went and obtained a Comodo SSL Certificate but cannot even add that to the server.


[root@hostsrv ~]# service cwpsrv reload
Redirecting to /bin/systemctl reload cwpsrv.service
[root@hostsrv ~]#

No errors

But when I go tot he site the browser keeps saying : 
This site is not secure

And in Opera I can't even override it as I can with MS Explorer

Any suggestions?


Kindly confirm that you have an A record for the hostname?

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #9 on: May 30, 2019, 07:19:24 PM »
Followed the tutorial and still no green padlock!

Can you send me your hostname.

ctrl.xfxtechserv.com

I do have an A record set for it too

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #10 on: May 30, 2019, 08:41:00 PM »
it has both the A and the rDNS on the IP for the MX to work properly and if I try to put in my comodo ssl it says I created too many for the week , via the panel

Offline
*
Re: [Tutorial] How to install SSL on hostname?
« Reply #11 on: June 15, 2019, 12:07:21 AM »
Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell
Code: [Select]
service cwpsrv reload
THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

Thank You works like a charm :)

Offline
*****
Re: [Tutorial] How to install SSL on hostname?
« Reply #12 on: June 15, 2019, 08:40:59 PM »
Followed the tutorial and still no green padlock!

Can you send me your hostname.

ctrl.xfxtechserv.com resolves to 24.154.72.145. Is this the IP of your cwp server?

I do have an A record set for it too

Offline
*****
Re: [Tutorial] How to install SSL on hostname?
« Reply #13 on: June 15, 2019, 08:41:25 PM »
ctrl.xfxtechserv.com resolves to 24.154.72.145. Is this the IP of your cwp server?

Offline
**
Re: [Tutorial] How to install SSL on hostname?
« Reply #14 on: June 18, 2019, 10:21:52 AM »
This is my error.

AutoSSL: Issue Failed![Mon May  6 17:35:28 CEST 2019] Single domain='panel.betahostserver.com'
[Mon May  6 17:35:28 CEST 2019] Getting domain auth token for each domain
[Mon May  6 17:35:30 CEST 2019] Getting webroot for domain='panel.betahostserver.com'
[Mon May  6 17:35:30 CEST 2019] Verifying: panel.betahostserver.com
[Mon May  6 17:35:33 CEST 2019] Pending
[Mon May  6 17:35:36 CEST 2019] Pending
[Mon May  6 17:35:38 CEST 2019] Pending
[Mon May  6 17:35:40 CEST 2019] Pending
[Mon May  6 17:35:43 CEST 2019] Pending
[Mon May  6 17:35:46 CEST 2019] Pending
[Mon May  6 17:35:48 CEST 2019] Pending
[Mon May  6 17:35:51 CEST 2019] Pending
[Mon May  6 17:35:53 CEST 2019] panel.betahostserver.com:Verify error:DNS problem: SERVFAIL looking up CAA for betahostserver.com
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log

In /root/.acme.sh/acme.sh.log  is

[Mon May  6 17:35:53 CEST 2019] skip dns.
[Mon May  6 17:35:53 CEST 2019] _on_issue_err
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Mon May  6 17:35:53 CEST 2019] url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] payload='{}'
[Mon May  6 17:35:53 CEST 2019] POST
[Mon May  6 17:35:53 CEST 2019] _post_url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Mon May  6 17:35:54 CEST 2019] _ret='0'
[Mon May  6 17:35:54 CEST 2019] code='400'


Just Follow :

http://forum.centos-webpanel.com/ssl/install-let'sencrypt-for-admin-panel-user-panel-again-100-working/