SSL Improvements for cPanel & WHM

The internet is brimming with online stores, merchant gateways, and more e-commerce solutions than you can shake a stick at. With such a quickly growing market, the ability to securely communicate across a network became a necessity. Technologies, like SSL and TLS for example, have stepped up to fill this ever growing requirement. …

Spread the love
Screen Shot 2013-04-24 at 11.29.50 AM

The internet is brimming with online stores, merchant gateways, and more e-commerce solutions than you can shake a stick at. With such a quickly growing market, the ability to securely communicate across a network became a necessity. Technologies, like SSL and TLS for example, have stepped up to fill this ever growing requirement. For users who are running their own stores, or who simply want to be able to securely access their email, an SSL or TLS certificate is a necessity.

cPanel & WHM 11.38 will be seeing a number of new SSL improvements in the form of usability changes, SNI support, and support for multi-domain certificates. Recently, I was able to sit in on a demonstration of these new features to see for myself what this offering includes.  

Enhanced Error Checking

A number of niceties have been added to the user interface to make the process of installing a certificate more straight forward and much more foolproof.

Enhanced Error Checking steps when attempting to install a certificate on a server. In the event that there’s an issue with the certificate cPanel & WHM will deny the installation to prevent the certificate from being installed on the server. Additionally, it will let the user know that there is an issue that needs be to resolved in order for the installation to result in a working certificate.

Server Name Indicator (SNI)

Currently, it’s common for each SSL Certificate to require its own dedicated IP address. The cost of this address is typically being passed down to the end user.

SNI is able to change this paradigm by indicating what hostname the client is connecting to at the start of the handshake process. This allows a server to have multiple certificates all installed on the same IP address. Users on shared servers, that support SNI, will be able to install their own certificates and bypass the need for a dedicated address. While this saves on the cost of the dedicated IP address, this also helps reduce the need for extra addresses.

In order to experience the full benefit of SNI in cPanel & WHM 11.38, an operating system that supports this functionality will be needed as well. CentOS 6 is a prime example of such an operating system.

Multi-Domain Certificates (UCC/SAN)

What if I’m using an operating system that doesn’t support SNI, such as CentOS 5?

As an alternative to SNI we have also taken steps to improve our support for multi-domain certificates. These allow users to add multiple domain names to a single certificate, and multi-domain certificates can be installed onto shared IP addresses.

Within both cPanel & WHM, users can quickly create self-signed, multi-domain certificates and can additionally generate signing requests that they can then take to their SSL provider to have their permanent certificate created.

With all of the improvements coming it’s hard not to be excited for cPanel & WHM 11.38. You can expect to see these new SSL improvements soon.

Facebook Comments

More Stuff

3 Ways to Prevent Email Abuse *  This post was originally posted on July 12, 2016, and has been updated for accuracy.  Over 100 billion emails get sent per day. Everything from out...
Part 3: How I Built a cPanel Hosting Environment on Amazon AWS In Part 2 of this series, we discussed selecting and launching a new Amazon Machine Instance (AMI), creating and configuring that instance to serve as...
Removed Scripts in cPanel & WHM Version 11.42 All good things must come to an end. In version 11.42, we will remove several deprecated service update scripts from cPanel & WHM. These scripts h...
EasyApache 4 | cPanel Conference Session Whether you’re running a hosting operation with thousands of servers or just a handful, this talk will light up the ways EasyApache 4 and our new Mul...
Spread the love

Posted by News Monkey