[Tutorial] How to install SSL on hostname?

[Jamshed Datori]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

[Dragan]

This is my error.

AutoSSL: Issue Failed![Mon May  6 17:35:28 CEST 2019] Single domain='panel.betahostserver.com'
[Mon May  6 17:35:28 CEST 2019] Getting domain auth token for each domain
[Mon May  6 17:35:30 CEST 2019] Getting webroot for domain='panel.betahostserver.com'
[Mon May  6 17:35:30 CEST 2019] Verifying: panel.betahostserver.com
[Mon May  6 17:35:33 CEST 2019] Pending
[Mon May  6 17:35:36 CEST 2019] Pending
[Mon May  6 17:35:38 CEST 2019] Pending
[Mon May  6 17:35:40 CEST 2019] Pending
[Mon May  6 17:35:43 CEST 2019] Pending
[Mon May  6 17:35:46 CEST 2019] Pending
[Mon May  6 17:35:48 CEST 2019] Pending
[Mon May  6 17:35:51 CEST 2019] Pending
[Mon May  6 17:35:53 CEST 2019] panel.betahostserver.com:Verify error:DNS problem: SERVFAIL looking up CAA for betahostserver.com
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log

In /root/.acme.sh/acme.sh.log  is

[Mon May  6 17:35:53 CEST 2019] skip dns.
[Mon May  6 17:35:53 CEST 2019] _on_issue_err
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Mon May  6 17:35:53 CEST 2019] url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] payload='{}'
[Mon May  6 17:35:53 CEST 2019] POST
[Mon May  6 17:35:53 CEST 2019] _post_url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Mon May  6 17:35:54 CEST 2019] _ret='0'
[Mon May  6 17:35:54 CEST 2019] code='400'

[Jamshed Datori]

It seems that you have not A record for panel.betahostserver.com.

So, kindly go to DNS manager and add an A record for panel with server IP.

[Guax]

Excellent tutorial jamshed_206, thank you very much, I have had problems lately with this topic and now I have it much clearer.

[Jamshed Datori]

Excellent tutorial jamshed_206, thank you very much, I have had problems lately with this topic and now I have it much clearer.

I am happy to see you happy. Enjoy the CWP and if you have any issue, contact me.

[rhunyady]

Followed the tutorial and still no green padlock!

[Jamshed Datori]

Followed the tutorial and still no green padlock!

Can you send me your hostname.

[imtom]

I followed these instructions and without success, I went and obtained a Comodo SSL Certificate but cannot even add that to the server.


[root@hostsrv ~]# service cwpsrv reload
Redirecting to /bin/systemctl reload cwpsrv.service
[root@hostsrv ~]#

No errors

But when I go tot he site the browser keeps saying : 
This site is not secure

And in Opera I can't even override it as I can with MS Explorer

Any suggestions?

[Jamshed Datori]

I followed these instructions and without success, I went and obtained a Comodo SSL Certificate but cannot even add that to the server.


[root@hostsrv ~]# service cwpsrv reload
Redirecting to /bin/systemctl reload cwpsrv.service
[root@hostsrv ~]#

No errors

But when I go tot he site the browser keeps saying : 
This site is not secure

And in Opera I can't even override it as I can with MS Explorer

Any suggestions?

Kindly confirm that you have an A record for the hostname?

[rhunyady]

Followed the tutorial and still no green padlock!

Can you send me your hostname.

ctrl.xfxtechserv.com

I do have an A record set for it too

[imtom]

it has both the A and the rDNS on the IP for the MX to work properly and if I try to put in my comodo ssl it says I created too many for the week , via the panel

[Jason]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

Thank You works like a charm

[evansa]

Followed the tutorial and still no green padlock!

Can you send me your hostname.

ctrl.xfxtechserv.com resolves to 24.154.72.145. Is this the IP of your cwp server?

I do have an A record set for it too

[evansa]

ctrl.xfxtechserv.com resolves to 24.154.72.145. Is this the IP of your cwp server?

[glorency]

This is my error.

AutoSSL: Issue Failed![Mon May  6 17:35:28 CEST 2019] Single domain='panel.betahostserver.com'
[Mon May  6 17:35:28 CEST 2019] Getting domain auth token for each domain
[Mon May  6 17:35:30 CEST 2019] Getting webroot for domain='panel.betahostserver.com'
[Mon May  6 17:35:30 CEST 2019] Verifying: panel.betahostserver.com
[Mon May  6 17:35:33 CEST 2019] Pending
[Mon May  6 17:35:36 CEST 2019] Pending
[Mon May  6 17:35:38 CEST 2019] Pending
[Mon May  6 17:35:40 CEST 2019] Pending
[Mon May  6 17:35:43 CEST 2019] Pending
[Mon May  6 17:35:46 CEST 2019] Pending
[Mon May  6 17:35:48 CEST 2019] Pending
[Mon May  6 17:35:51 CEST 2019] Pending
[Mon May  6 17:35:53 CEST 2019] panel.betahostserver.com:Verify error:DNS problem: SERVFAIL looking up CAA for betahostserver.com
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log

In /root/.acme.sh/acme.sh.log  is

[Mon May  6 17:35:53 CEST 2019] skip dns.
[Mon May  6 17:35:53 CEST 2019] _on_issue_err
[Mon May  6 17:35:53 CEST 2019] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Mon May  6 17:35:53 CEST 2019] url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] payload='{}'
[Mon May  6 17:35:53 CEST 2019] POST
[Mon May  6 17:35:53 CEST 2019] _post_url='https://acme-v02.api.letsencrypt.org/acme/challenge/SPH1oHvs_uQwKax9uN8DP4yoENli0itQYdwVG5LcuQE/15557108187'
[Mon May  6 17:35:53 CEST 2019] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  -g '
[Mon May  6 17:35:54 CEST 2019] _ret='0'
[Mon May  6 17:35:54 CEST 2019] code='400'

Just Follow :

http://forum.centos-webpanel.com/ssl/install-let'sencrypt-for-admin-panel-user-panel-again-100-working/