Install SSH Certificate in WHM via SSH - ssl

I have a server with around 300 cpanel accounts on WHM and would like to install SSL Certificates for those website in bulk (the certificates are all available already).
I know there is the WHM option to install SSL Certificates for Domains - however is there a way to do this via SSH as well?
WHM has multiple scripts like backing up Cpanel accounts, or restoring them, suspending them etc. Is there a way to install certificates like this too? (If so, I was not able to find it on the WHM documentation)
Or would I have to go the Apache / Centos installation way on SSH?
Thanks for any input or suggestions!

Using the WHM API 1 functions located in whmapi1 it is possible to achieve most of the WHM functions of the backend

Related

Let's Encrypt certificate with Docker

I'm new to Docker, I've been trying to set up an environment that emulates a standard LAMP stack do develop PHP applications locally and easily deploy them
So far I've followed this setup for my Docker, it seems to be working fine, but I'm having trouble with certificates. On a normal server I would just run Certbot, select the Apache site to enable HTTPS for, and be done with it.
On Docker however I have no idea how to do this. My certificates should be placed inside ./cert/. Does that mean that I have to run commands to add the PPA, install Certbot, then create a certificate and place it in the folder I want? Or is there a simpler way to do this?
Googling brought me to a whole lot of Docker images that automatically create a Certificate and also create an Apache instance, but I'd like to keep this as vanilla as possible.
What is the process of using a Let's Encrypt certificate with Docker?
Should I even install one locally or is that bad practice?
My certificates should be placed inside ./cert/. Does that mean that I have to run commands to add the PPA, install Certbot, then create a certificate and place it in the folder I want? Or is there a simpler way to do this?
Yes, you can proceed like this and store the certificate into a volume which point to ./cert/.
What is the process of using a Let's Encrypt certificate with Docker?
Should I even install one locally or is that bad practice?
There is no certificate management with docker. Yes you can manage the certificate in your container but it would be hard to maintain it ( renewal etc).
The correct approach would be to use traefik as a load balancer it has built-in certificate manager which handle all the necessary.

Web Developer Novice: How To SSL + Digital Ocean + Bitbucket

Rookie web developer, 1 year in the business, I know enough to know I don't know a lot.
I am maintaining/updating a site designed by someone else. The immediate need is to set up SSL on the site. Original dev used Let's Encrypt, but it has expired and I don't know how to update.
Original dev gave me a lot of access/login info that I cannot decipher.
It looks like it is hosted by Digital Ocean, as he gave me a droplet name, along with IP address, username and password--but these do not log me in to any account on digitalocean.com.
He also gave me some CLI prompts, though I am not very familiar with CLI.
And I have access to the Bitbucket repo, but I do not know if I can install SSL from this.
I welcome any help in connecting these dots.
The login credentials supplied to you are droplet-specific and intended to be used to SSH into the droplet (using putty or other terminal emulator).
That said, you may automate the Let'sEncrypt cert renewal by installing Certbot on your machine. It requires a bit of CLI tinkering on the droplet (and sudo privileges) but a tutorial like this takes literally less than 10 minutes to complete even for the uninitiated. Check:
Secure Nginx with Let's Encrypt on Ubuntu 16.04
If you're not using Nginx, or your OS is something other than Ubuntu 16.04, you may find other tutorials on DO's website

How can I install SSL in cPanel?

I have a problem with my cPanel. I have SSL certificate, but I have done every thing to active SSL certificate but my server does not have (Install and Manage SSL for your site (HTTPS)) this option to active SSL. now, how can I activate my SSL certificate without it? I have attached a screenshot
Most probably if your server do not have option to Install and Manage SSL for your site(HTTPS) that simply means you can not install SSL from your hosting provider. This might be due to you are using free hosting, which do not allow to have this option. In order to use SSL you need to upgrade your hosting account to paid one.
But above all, even if you are on free hosting you can install SSL for free by using Cloudflare. You just need to update your current nameservers to cloudflare nameservers and enable SSL option. That's it. Here is a link to Cloudflare SSL.
Hope this helps.
Thanks!

Removing Rogue SSL Certs on AWS

I have a client site set up on AWS with multiple servers running HTPPS behind an Elastic Load Balancer. At some point, someone from the client's team attempted to update the SSL Cert by installing a new one directly on one of the servers (instead of in the ELB).
I was able to upload a new cert to the ELB, but when traffic is directed towards the server with the improperly installed cert, it triggers a security warning.
No one can seem to answer who attempted this install, how they went about, or where they installed it.
What's the best way to go about finding and removing it?
Thanks,
ty
If it's installed on the server, it has very little to do with AWS. I see you tagged the question with apache so I assume the server is running Apache Web Server. You will have to connect into that server and remove the SSL settings from the Apache Web Server configuration, just like you would with an Apache Web Server install anywhere else.

Backup cpanel account with SSL

I have a live server which has cPanel installed on it. It is hosting a website with a SSL certificate that got installed in Cpanel for the cpanel-user hosting the domain.
I now downloaded a backup of this cpanel account to my dev server (and restored it in WHM, dev server is using cpanel too) for testing purposes, however I have a question regarding the SSL:
Does the SSL certificate get copied when the cpanel account gets backed-up?
After changing my host file i am still able to see the website using SSL (even though its on the dev server and there was not a certificate installed). My understanding was that the SSL is specific for each server, because the CSR is done on the server the certificate should run on.
Why am I able to access both live and dev using https?
Yes, SSL certificate will be migrate When you migrate OR restore your account through cPanel/WHM tool.