How to keep a host using cPanel from sending the wrong ssl certificate - cpanel

This appears to be a cPanel problem. The good folks at name.com use cPanel. Hosting at name.com for my site is a problem in that when someone accesses my site with https the SSL certificate from another site is sent by the server. cPanel docs seem to imply what I'm describing is a known problem. http requests are fine. Short of implementing SSL for my site, are there recommended ways to set up my site?

This issue is coming because you dont have private SSL for your domain, so install a SSL for domain.
You can get a free SSL from these 2 site:
https://www.startssl.com/
https://letsencrypt.org/
and request your hosting provider to install a SSL after that your website will on both http:// and https://

Related

is it possible to generate an SSL certificate for an internal site?

On Windows10 I have an internal website on iis, which I access through a url https://localhost:44300.
Currently I have the security messages come up when I first load the url and I have the broken padlock.
Unfortunately the network I'm on blocks security certificate warnings and I can't get to my site.
Is it possible to buy an SSL certificate for an internal site?
At the moment I'm using mkcert to be my own CA, but I'm told this is not suitable for a production site.
Thanks Ian.

Different page loaded via https and http

I have a shared hosting (economy plan) with Godaddy. I tied my domain name to the hosting. I also use cloudflare and its SSL settings. I changed the namservers in Godaddy as instructed by cloudflare.
When I try to reach my site via http everything is ok. But when I try to reach it via https I get the default Godaddy greeting page:
Future home of something quite cool.
I use the "FULL" SSL settings in Cloudflare.
Any idea why I cannot access my site via https?
Thanks
Ok, after some more trial and error I figured it out.
I had to set SSL to flexible and "Always use HTTPS" on at cloudlare.
I'm using WordPress so I also had to install "CloudFlare Flexible SSL" plugin, because my styles were broken.

Subdomain working fine with http and not working with https

Recently I have installed ssl certificate on my website. After the ssl certificates have been installed ,I found that my subdomain is not working properly. I will address my subdomain as 'xxxx'and main domain as 'primary'. The main domain works well with http as well as https. Now the subdomain works well with http, but with https://xxxx.primary.com delivers me the main site content and not the content of subdomain. I'm using apache server, linux operating system.
Can anyone please help to solve this issue?
Thanks in advance.
This is how SSL protocol works with the browsers. Whenever browsers receive HTTPS request for domain name, it first checks with the server then delivers the site's content. If a website on server has enabled SSL accessed with HTTPS, browser will try to make secure connection and send request to the server.
In your case, your main website is working properly with HTTP as well as HTTPS and delivers proper content, but your sub-domain is not showing proper content for HTTPS. In order to deliver proper content you should consult with your development team. You can better host your sub-domain on another server or you can protect your sub-domain with valid separate SSL certificate.
Suggestion: If you own multiple sub-domains then it is advisable to use Wildcard SSL, that can protect unlimited number of sub-domains with single certificates. Please note, this unlimited does secure first level (blog.domain.com), doesn't second-third-fourth-etc. level (news.blog.domain.com, 1.news.blog.domain.com or abc.1.news.blog.domain.com).

SSL certificates error with godaddy domain and cloudflare certificates

I'm new to web development and finally been able to create something and show to the world. I have the domain with godaddy, hosted webapp with heroku and using cloudflare SSL certificates. Trying to be cheap as dont want to spend money until I find some traffic to the website.
Chrome and Firefox warn that website is not safe when I type
www.mywebsite.com
however When I type
https://www.mywebsite.com
they work fine. Interestingly I also tested website on opera and it does not warn me at all and successfully show the valid certificates. Can anyone please help?
That is just showing you that you are accessing the site not in SSL (https). You should put in an automatic redirect to avoid people seeing that.

Apache Https to Http Redirect

I currently have a website that use to have an SSL so the web address started with https://
I moved the website to a new server and platform which doesn't have an SSL so the web address starts with http://
I have inbound links going to the https address that I am wanting to redirect to the new website http url. Is this possible without me having to reinstall a new SSL on the new server? Is so, what could a possible solution be?
I have searched and found some promising stuff, but nothing worked. The hosting account is running on Cpanel v11.38.2 and Apache v2.2.23. Thank you for any insight, it is greatly appreciated!
Regards
To accept an HTTPS connection even only to return a redirect, you must still accept HTTPS connections in the first place, which means you need HTTPS installed and turned-on, either with a real certificate or a self-signed one.
For details on how to achieve the actual redirection, perhaps this question can help you: How do you redirect HTTPS to HTTP?