Get Paid to Participate - up to $1 per post!     Twitter     Facebook     Google+
Hosting Discussion
 

Hosting Discussion > Web Hosting Forums > Web Hosting Discussion > Free SSL Lets encrypt installation on cpanel server
forgot password?



Reply


Old
  Post #1 (permalink)   02-17-2017, 06:46 AM
HD Newbie
 
Join Date: Feb 2017
Location: Oman
Posts: 32

Status: hostgliders is offline
The Let's Encrypt plugin allows you to automatically provision cPanel accounts with Let's Encrypt SSL certificates for sites that do not already have valid CA-signed SSL certificates.

Requiremenst Root SSH access to WHM i386 or x86_64 CentOS 6 or 7 (5 is not supported) WHM 11.52 or higher (CloudLinux and LSWS compatible) Remote access key has been generated (/root/.accesshash). If it is not present, simply visit the “Remote Access Key” page in WHM. Please note: cPanel DNSONLY servers are currently NOT supported.

Installation

To install the plugin, perform the following steps:

Log in to the command line via SSH as the root user.

Run the following command:

** /scripts/install_lets_encrypt_autossl_provider**
Thenselect Let's Encrypt as an AutoSSL provider, use WHM's Manage AutoSSL interface (Home >> SSL/TLS >> Manage AutoSSL).

Installing Letsencrypt for Server Hostname

First take a backup of your current SSL CRT directory first:

# tar -zcf /root/cptechs/var_cpanel_ssl.tar.gz$(date +%s) /var/cpanel/ssl/

Go to WHM > Service Configuration > Manage Service SSL Certificates and clicked "Reset Certificate" for each service to install a Self Signed SSL CRT.

Run below command in command line to issue new SSLfor services

/usr/local/cpanel/bin/checkallsslcerts --verbose

The system will attempt to replace the self-signed certificate for the “exim” service with a signed certificate from the cPanel Store. The system will attempt to replace the self-signed certificate for the “ftp” service with a signed certificate from the cPanel Store. The system will attempt to replace the self-signed certificate for the “dovecot” service with a signed certificate from the cPanel Store. The system will attempt to replace the self-signed certificate for the “cpanel” service with a signed certificate from the cPanel Store. The cPanel Store is processing the hostname certificate request. The system will check the cPanel Store again the next time that “/usr/local/cpanel/bin/checkallsslcerts” runs.

We can see the SSL CRT's have been requested for your services. The hostname for the SSL CRT will be with one that is currently defined in cPanel:

# whmapi1 gethostname|grep hostname:

hostname: server1.hostname.com

While the process is not always this fast, after a few moments, we can see the SSL CRT's are ready for install. Then re-ran the '/usr/local/cpanel/bin/checkallsslcerts --verbose' command which would have been ran at maintenance time. You may verify at WHM > Service Configuration > Manage Service SSL Certificates.

You can verify SSL installation by running https://server1.hostname.com:2087 You can see a green padlock with letsencrypt SSL.
 
 
 
The Following 2 Users Say Thank You to hostgliders For This Useful Post:
danielpmc (02-17-2017), ikalf (02-19-2017)


Old
  Post #2 (permalink)   02-21-2017, 12:01 AM
HD Addict
 
Join Date: Sep 2014
Location: India
Posts: 123
Send a message via Skype™ to 24x7server

Status: 24x7server is offline
Hi,

It is a great tool to have a free SSL, but you may get into some issue at times with some browsers though, have faced this in the past, where the browser does not recognize it, as it being a free one. Before you install, check what browser does it support because new updates of the browsers and refusing some of the free certificates to validate properly..
__________________
www.24x7servermanagement.com
Server Management, Server Security, Server Monitoring.
Network Monitoring Team !! Skype: techs24x7
 
 
 


Old
  Post #3 (permalink)   02-21-2017, 02:14 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,751
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
well if you use cpanel and upgrade to WHM/cPanel 60.0 then you don't need Let's Encrypt as cPanel have AutoSSL.

https://documentation.cpanel.net/dis...Manage+AutoSSL

which automatically places a DV SSL on all accounts on the server that does not already have an SSL and will also issue an SSL to the servers hostname and the Servers Service SSL certs all free and will even auto renew them
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 
The Following User Says Thank You to easyhostmedia For This Useful Post:
HostLeet (02-23-2017)


Old
  Post #4 (permalink)   02-21-2017, 10:14 AM
HD Master
 
HostXNow's Avatar
 
Join Date: Dec 2009
Location: United Kingdom
Posts: 453

Status: HostXNow is offline
We don't use custom plugin; rather use official AutoSSL from cPanel. I try not to use unofficial stuff unless if I can help it.
__________________
Web Hosting - Professional Hosting Solutions
Web Hosting Forum - Web Hosting Community
 
 
 


Old
  Post #5 (permalink)   02-28-2017, 11:24 AM
HD Addict
 
Join Date: Nov 2008
Location: Central Indiana, USA
Posts: 186
Send a message via AIM to MikeDVB Send a message via MSN to MikeDVB Send a message via Skype™ to MikeDVB

Status: MikeDVB is offline
AutoSSL from cPanel works pretty well. I've seen some quirks with it - but honestly - it works well enough for the most part.
__________________
Michael Denney - MDDHosting LLC - Professional Hosting Solutions
HA Shared Plans Check them out! Old plans still available.
Shared, Premium, Reseller, and VPS
http://www.mddhosting.com/
 
 
 
The Following User Says Thank You to MikeDVB For This Useful Post:
HostXNow (02-28-2017)


Old
  Post #6 (permalink)   02-28-2017, 11:27 AM
HD Master
 
HostXNow's Avatar
 
Join Date: Dec 2009
Location: United Kingdom
Posts: 453

Status: HostXNow is offline
Quote:
Originally Posted by MikeDVB View Post
AutoSSL from cPanel works pretty well. I've seen some quirks with it - but honestly - it works well enough for the most part.
I agree. It does the job nicely.
__________________
Web Hosting - Professional Hosting Solutions
Web Hosting Forum - Web Hosting Community
 
 
 


Old
  Post #7 (permalink)   03-01-2017, 05:28 PM
HD Newbie
 
Join Date: Apr 2012
Posts: 12

Status: LusoVPS is offline
Quote:
Originally Posted by easyhostmedia View Post
well if you use cpanel and upgrade to WHM/cPanel 60.0 then you don't need Let's Encrypt as cPanel have AutoSSL.

https://documentation.cpanel.net/dis...Manage+AutoSSL

which automatically places a DV SSL on all accounts on the server that does not already have an SSL and will also issue an SSL to the servers hostname and the Servers Service SSL certs all free and will even auto renew them
I can vouch to this. AutoSSL works as a charm! No need to install let's encrypt on a cpanel server.
 
 
 


Old
  Post #8 (permalink)   03-02-2017, 08:38 AM
HD Newbie
 
Join Date: Feb 2017
Posts: 23

Status: bestcast4u is offline
AutoSSL is a great tool and easy to install.
__________________
bestcast4u.com
Smart, Speedy Web Hosting with Awesome 24/7 Support
Shared Web Hosting - Reseller Hosting - Shoutcast Hosting
 
 
 


Old
  Post #9 (permalink)   03-02-2017, 03:39 PM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,751
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by LusoVPS View Post
I can vouch to this. AutoSSL works as a charm! No need to install let's encrypt on a cpanel server.
but cPanel placed let's encrypt as a default feature from WHM 58, which they would have known then about AutoSSL being developed
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 
Reply

Thread Tools

New Post New Post   Old Post Old Post
Posting Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Sponsored By: