{"id":314,"date":"2021-07-23T12:27:39","date_gmt":"2021-07-23T12:27:39","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/service-subdomains-use-the-cpanel-service-ssl\/"},"modified":"2021-07-23T12:27:39","modified_gmt":"2021-07-23T12:27:39","slug":"service-subdomains-use-the-cpanel-service-ssl","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/service-subdomains-use-the-cpanel-service-ssl\/","title":{"rendered":"Service Subdomains Use the cPanel Service SSL"},"content":{"rendered":"<\/p>\n
\n
<\/div>\n
\n

Overview<\/h2>\n

In cPanel & WHM version 11.40 and earlier, visitors who accessed a website via https<\/code> without an SSL configuration saw a connection error.<\/p>\n

In cPanel & WHM version 11.42 and later, we modified Apache\u2019s configuration to properly use service subdomains (proxy subdomains) with SSL.<\/p>\n

    \n
  • \n

    Service subdomain (proxy subdomain) virtualhosts now handle SSL and non-SSL connections separately.<\/p>\n<\/li>\n

  • \n

    Each service subdomain\u2019s (proxy subdomain\u2019s) virtualhost explicitly binds to all of the assigned IP addresses on a server.<\/p>\n<\/li>\n

  • \n

    SSL virtualhost configurations \u2014 such as the cpanel<\/code>, whm<\/code>, webdisk<\/code>, and webmail<\/code> service subdomains (proxy subdomains) \u2014 use the cPanel service SSL certificate.<\/p>\n<\/li>\n<\/ul>\n

    In cPanel & WHM version 62 and later, cPanel & WHM enables SNI functionality by default for SSL certificates on service subdomains (proxy subdomains). SNI allows multiple SSL certificates to use a single IP address and port number.<\/p>\n

    Due to these changes, Apache uses cPanel\u2019s service SSL certificate to secure websites that do not have an SSL certificate. Visitors to sites without an SSL certificate may see an SSL warning, because Apache used cPanel\u2019s service SSL certificate to secure the site.<\/p>\n

    How to bypass the use of service subdomains (proxy subdomains) and the cPanel service SSL certificate<\/h2>\n
    \n
    Warning:<\/div>\n
    \n We recommend that you do not<\/strong> bypass your server\u2019s service subdomain (proxy subdomain) configuration.\n <\/div>\n<\/div>\n

    To prevent the use of the cPanel service SSL certificate for the cpanel<\/code>, whm<\/code>, webdisk<\/code>, and webmail<\/code> subdomains, you must<\/strong> perform the following steps:<\/p>\n

      \n
    1. \n

      Disable the Service subdomains<\/em> setting in the Domains<\/em> section of WHM\u2019s Tweak Settings<\/em> interface (WHM >> Home >> Server Configuration >> Tweak Settings<\/em>). <\/p>\n

      \n
      Note:<\/div>\n
      \n In cPanel & WHM version 76, we renamed the Proxy Subdomains<\/em> setting to Service Subdomains<\/em>.\n <\/div>\n<\/div>\n<\/li>\n
    2. \n

      Use cPanel\u2019s Subdomains<\/em> interface (cPanel >> Home >> Domains >> Subdomains<\/em>) to manually create each service\u2019s subdomain (for example, cpanel<\/code>, whm<\/code>, webdisk<\/code>, and webmail<\/code>).<\/p>\n<\/li>\n

    3. \n

      Redirect each service\u2019s subdomain to the appropriate secure URL and port as follows:<\/p>\n

        \n
      • \n

        cPanel<\/strong>: cpanel.example.com<\/code> to https:\/\/example.com:2083<\/code><\/p>\n<\/li>\n

      • \n

        WHM<\/strong>: whm.example.com<\/code> to https:\/\/example.com:2087<\/code><\/p>\n<\/li>\n

      • \n

        Web Disk<\/strong>: webdisk.example.com<\/code> to https:\/\/example.com:2078<\/code><\/p>\n<\/li>\n

      • \n

        Webmail<\/strong>: webmail.example.com<\/code> to https:\/\/example.com:2096<\/code><\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n

        When you navigate to webmail.example.com<\/code>, the server redirects you to https:\/\/example.com:2096<\/code> and uses the example.com<\/code> domain\u2019s SSL certificate to secure the connection.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

        Overview In cPanel & WHM version 11.40 and earlier, visitors who accessed a website via https without an SSL configuration saw a connection error. In cPanel & WHM version 11.42 and later, we modified Apache\u2019s configuration to properly use service subdomains (proxy subdomains) with SSL. Service subdomain (proxy subdomain) virtualhosts now handle SSL and non-SSL …<\/p>\n","protected":false},"author":1,"featured_media":315,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/314"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=314"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/314\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/315"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}