Learn how to ensure that cPanel installs an SSL/TLS certificate on your domain for secure HTTPS traffic. Follow these steps to troubleshoot SSL/TLS certificate installation issues and ensure optimal website security and performance.
In today's web world, security is paramount. An SSL/TLS certificate is a digital passport that encrypts communication between your website and visitors' browsers, ensuring data privacy. This guide will show you how to check the SSL/TLS status of your domain and enable automatic SSL certificate installation within your WebHostingM cPanel interface.
What is an SSL/TLS Certificate?
Imagine a secure tunnel protecting sensitive information as it travels between your website and visitors' browsers. An SSL/TLS certificate acts as that tunnel, encrypting data (like login credentials or credit card information) to safeguard it from prying eyes.
Why Use an SSL/TLS Certificate?
There are several compelling reasons to use an SSL/TLS certificate:
-
Enhanced Security: SSL/TLS certificates encrypt communication, making it virtually impossible for hackers to steal data.
-
Search Engine Optimization (SEO) Boost: Search engines like Google give ranking preference to websites with SSL/TLS certificates.
-
Increased Trust and Credibility: An SSL/TLS certificate assures visitors that your website is legitimate and protects their information.
WebHostingM to the Rescue!
When you create a new account with WebHostingM, our system automatically installs an SSL/TLS certificate on your domain if it doesn't already have one. This ensures your website is secure from the get-go.
Checking Your Domain's SSL/TLS Status
Before doing anything regarding this, verify the domain IP configuration.
- Ensure that your domain's IP address is correctly pointing to the server hosting your cPanel account. Incorrect IP configuration can hinder SSL/TLS certificate installation. This includes proxying your IP in Cloudflare.
- Navigate to the Zone Editor in cPanel and manage your DNS records, ensuring they match those at your domain registrar's DNS dashboard.
1. Check SSL/TLS Status:
- Log in to cPanel and navigate to the Security section.
- Click on "SSL/TLS Status". This page will display the current SSL/TLS status for your domain. Look for any errors that might prevent our system from automatically installing a certificate.
2. Identify Installation Errors:
- If any errors are indicating why an SSL/TLS certificate hasn't been installed, take note of them for troubleshooting.
3. Delete Old Certificate (If Necessary):
- In the "SSL/TLS" section, locate and delete any existing old certificates associated with your domain.
If your domain doesn't have an SSL/TLS certificate or if the existing one has expired, you can instruct cPanel to install a new one. Here's how:
4. Request AutoSSL Installation:
- Return to SSL/TLS Status and select the domain(s) for which you want to install an SSL/TLS certificate.
- Use AutoSSL to request the installation of a CA-validated SSL/TLS certificate for the selected domain(s) and their service domains.
AutoSSL not working with CloudFlare
This guide tackles common challenges that can arise when using AutoSSL with CloudFlare. We'll explore the root causes, provide clear solutions, and equip you with best practices for a smooth SSL experience.
Understanding the Conflict
AutoSSL relies on Domain Control Validation (DCV) to verify your ownership of the domain. When CloudFlare manages your DNS, the standard DNS DCV method fails. Additionally, enforcing HTTPS redirection on your domain can hinder the HTTP DCV method.
Resolving AutoSSL Issues
To get AutoSSL working seamlessly with CloudFlare may include temporarily disabling CloudFlare's Automatic HTTPS features.
- Navigate to the SSL/TLS app: Within your CloudFlare dashboard, locate the SSL/TLS app.
- Disable "Always Use HTTPS" and "Automatic HTTPS Rewrites": These options are typically found under the "Edge Certificates" tab. Disabling them allows AutoSSL to complete the DCV check.
- Renew your SSL certificate: Once these options are disabled, proceed with renewing your SSL certificate through your cPanel interface.
- Re-enable CloudFlare's HTTPS features (Optional): After successfully renewing your certificate, you can re-enable "Always Use HTTPS" and "Automatic HTTPS Rewrites" if desired.
Redirect Loop Errors with Cloudflare SSL Options
When using Cloudflare SSL options, you may encounter redirect loop errors on a site that uses the Cloudflare proxy. The error may look similar to the following:
ERR_TOO_MANY_REDIRECTS
This can occur due to a misconfiguration in Cloudflare SSL options or an incompatibility with Cloudflare SSL options and the origin web server.
Cloudflare provides troubleshooting information and suggested resolutions in their documentation at https://support.cloudflare.com/hc/en-us/articles/115000219871-Troubleshooting-redirect-loop-errors-
"Error 526: Invalid SSL certificate" Error
When trying to access a domain using CloudFlare, the site returns the following error:
Error 526: Invalid SSL certificate.
CloudFlare has a few different SSL modes, the main ones are:
- Off
- Flexible
- Full
If the Full mode is in use, the site would need to have a valid SSL certificate installed via cPanel » Home » Security » SSL/TLS. This happens because Full requires a valid certificate In the backend server (cPanel).
If purchasing an SSL certificate is not an option, then the SSL mode must be changed to Flexible which encrypts the connection from the browser to Cloudflare but allows for insecure connections from CloudServer to the server.
It's also possible to manually install an SSL/TLS certificate obtained from a third-party certificate authority.
Visit https://mydashboard.webhostingm.com/store/secure-your-website-with-ssl to learn more.
WebHostingM Support Is Here to Help!
Remember: If you ever encounter issues or have questions specific to your WebHostingM account, or encounter any challenges that require assistance, simply submit a ticket and our friendly engineers will be happy to help you resolve any challenges you may face.
Not a WebHostingM customer yet, but curious about the power of cPanel? WebHostingM offers fantastic cPanel hosting plans – check them out at our cPanel Marketplace and unlock a world of website management possibilities!
