[Tutorial] How to install SSL on hostname?

[evansa]

....panel.betahostserver.com:Verify error:DNS problem: SERVFAIL looking up CAA for betahostserver.com..

This is clearly a DNS problem.

please ensure the hostname resolves to the public IP of your VPS

[picknkeith]

For what it's worth, this worked.  However, I ran into the issue on Chrome that my site was not secure.  When I read this post  and saw "Green" padlock, I immediately thought about Firefox (which is usually where I only see the green padlock).  So, I pulled up Firefox and sure enough, it worked.  I then went back to Chrome, pulled up an incognito tab, and it worked there.  So, I killed the original tab, cleared cache, and it worked.  Moral of the story: Try other browsers.
Thanks to the OP for helping with my solution.

[Jamshed Datori]

For what it's worth, this worked.  However, I ran into the issue on Chrome that my site was not secure.  When I read this post  and saw "Green" padlock, I immediately thought about Firefox (which is usually where I only see the green padlock).  So, I pulled up Firefox and sure enough, it worked.  I then went back to Chrome, pulled up an incognito tab, and it worked there.  So, I killed the original tab, cleared cache, and it worked.  Moral of the story: Try other browsers.
Thanks to the OP for helping with my solution.

I am glad that it worked for you.

[Jamshed Datori]

I have purchased a new cert and clicked the "Install new Certificate" option and that all completes correcty (shows cert as Self Signed: No and shows the cert type as the new REAL one).

However, when I go to https://server.domain.dom:2087 it still is using the old "self signed" default cert. Is there a step missing? I restarted Apache but not working still. So it appears like its gone to plan but the old cert is still there.

I have removed my browsers cache for the accepted self signed cert previously used so It shouldnt be releated to that.

Now, CWP has more powerful mechanism to Change hostname SSL. Now, you will have to only click on Change Hostname Button and select the services where you want to install the SSL.

Later on, you can change the SSL files with your own purchased SSL.

[luis web]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

people like this friend are sorely missed on this forum

[Jamshed Datori]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

people like this friend are sorely missed on this forum

I have not left the CWP and I am still here.

[naeemirza]

Hi,
I created instance at Google Cloud and after restart it changes the hostname automatically to default for which I had to issue SSL for numourous times while I was in process of setup.
Later I came to know that If I want to keep hostname permanent, I have to define while creating the instance. So I completely terminated the instance and re-created, installed CWP and used same hostname permanently during the creation of VM instance.

Now problem is I have created the instance but Let's Encrypt SSL is not allowing me to re-create the SSL for hostname/server fqdn with a message that I have created too many SSL and I can't create new for some specific time.

So I decided to use comodo SSL for the time being. Problem now is I don't know how to install manual SSL for my hostname.

Can anybody help me out on how to install Comodo SSL for my hostname? whereas the files I downloaded are following:

AAACertificateServices.crt
cloud_32n_co.crt
SectigoRSADomainValidationSecureServerCA.crt
USERTrustRSAAAACA.crt


Waiting for a positive responce from community.

[raphatihost]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

The wiki has step-by-step teaching how to configure using Tomcat

[Aamar Syed]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

I Jamshed,

Bro I am still having this problem. What I have done so for.

Setup CWP created an account with domain name wddpro.com.
Then in domain account I have added A record with IP as you suggested.
But I am stilling have same issue. https://vs.wddpro.com:2087/login/index.php

Secondly, I can see another error on NS
rDNS/PTR = ns1.wddpro.com FAILED

CAN YOU HELP ME PLEASE. I AM TOTALLY A NEW BE AND DOING ALL WITH HELP OF FORUMS AND TUTORIALS

Hostname change will also generate a new Hostname autoSSL Certificate.
Certificate Path: /etc/pki/tls/certs/hostname.bundle
Key Path: /etc/pki/tls/private/hostname.key
Pure-FTPd PEM: /etc/pki/tls/private/hostname.pem

Your Hostname is: vs.wddpro.com and it resolves to IP: 173.212.227.11 [Check Black List] [Check CWP SSL] [Check WebServers SSL]
rDNS/PTR = ns1.wddpro.com FAILED [Check SenderBase]

rDNS/PTR check for IP 173.212.227.11 = ns1.wddpro.com

[Aamar Syed]

@Jamshed I have just check the CWP SSL status and it came up following
https://www.sslcerty.com/certificate?h=vs.wddpro.com%3A2087

[cinique]

^ Ask Contabo for a managed VPS or shared server.

[Aamar Syed]

Hi,

I have fixed  following issue of ns record
Secondly, I can see another error on NS
rDNS/PTR = ns1.wddpro.com FAILED

but still no padlock on hostname
https://vs.wddpro.com:2087/

Can anyone help.

[andylau123]

Hello,

I could see that a lot of users are asking "How to install SSL on hostname" and I found a few tutorials some of which are working and others do not. Also, the tutorials which are working are lenghty and not for linux newbie.

So, I will teach you here how to install and configure Letsencrypt Free SSL on hostname in CWP in simple 3 steps.

1 - Check that you should have an A record for the hostname. For example if your server hostname is cp.hostinpk.com, then you should have an A record for "cp" pointing to server IP

2 - Login to CWP Admin Panel>> Server Settings>>Change Hostname and then hit "Change Hostname" button after putting your desired hostname (in my case cp.hostinpk.com). This will only generate a valid LE SSL for your hostname when an A record is present against hostname

3 - Perform following command from shell

Code Select Expand

service cwpsrv reload

THAT's IT. Enjoy the green padlock while accessing the CWP services (admin panel, user panel, webmail, etc..)

Hi,
Thank you for the great guide.
I have been able to access cwp-panel with ssl, but only webmail roundcube, when I log in, there is still no ssl.
I'm using Apache
Hope you can help yourself.

[andylau123]

I will add more pictures.
<a href="https://ibb.co/Z6QWv5M"><img src="https://i.ibb.co/VWF2bRq/01.png" alt="01" border="0"></a>
<a href="https://ibb.co/tM2FRLj"><img src="https://i.ibb.co/rGpN9d8/02.png" alt="02" border="0"></a>
<a href="https://ibb.co/8Xfgvrq"><img src="https://i.ibb.co/SJMwYtb/03.png" alt="03" border="0"></a>

[rcschaff]

I will add more pictures.
<a href="https://ibb.co/Z6QWv5M"><img src="https://i.ibb.co/VWF2bRq/01.png" alt="01" border="0"></a>
<a href="https://ibb.co/tM2FRLj"><img src="https://i.ibb.co/rGpN9d8/02.png" alt="02" border="0"></a>
<a href="https://ibb.co/8Xfgvrq"><img src="https://i.ibb.co/SJMwYtb/03.png" alt="03" border="0"></a>

2087 and 2083 are handled by the cwp version of nginx itself (/usr/local/cwpsrv/)

Whereas your third picture is run by apache/nginx (Whichever you use). 

Do the following:
grep cert /usr/local/cwpsrv/conf/cwpsrv.conf   Copy the 2 lines

FOr Apache:
nano /usr/local/apache/conf.d/hostname-ssl.conf
Find all instances of SSLCertificateFile and SSLCertificateKeyFile and point them to the cert above:

For Nignx:
nano /etc/nginx/conf.d/hostname-ssl.conf
Find all Instances of ssl_certificate and ssl_certificate_key and point them to the cert above

After making the changes, systemctl restart httpd and nginx -s reload