Jump to content

Recommended Posts

So I've seen a lot of feature requests for Lets Encrypt, so i made a tool which helps you generate a Lest Encrypt SSL cert easely. This will work for all domains, including free Subdomains! To get started, go to this tool and enter your email. Then enter your domain, a comma, a space and then www.yourdomain. Then select CNAME, accept the Let's encrypt tos and click on submit!

unknown.png

After about 30 seconds you will get shown a table.

unknown.png

Go to your cpanel, create, search CNAME and create records appropriate to the tool. For example if it shows _acme-challenge.example.org should point to xxxxxxxxxxxxxx.leverify.pichisdns.com, put in _acme-chalenge as the name and in points to put the xxxxxxxxxxxxxx.leverify.pichisdns.com. For the www subdomain just enter _acme-challenge.www.

unknown.png

After you've created all records, it's recommended to wait a few minutes. After that time has passed, click on Submit(in the SSL tool, not cpanel). After 2-3 min it either (hopefully) displays you the cert and privately, or it displays you a error. 

Unbenannt.png

The rest is pretty simple. Go to SSL in Cpanel, select your domain, paste the private key, hit upload, paste the cert, hit upload again, and wait a bit. Then you should have SSL! You can test SSL on the domain that was used in this tutorial, https://pichisblog.ml.

Unbenannt3.png

You may want to enforce https with some htaccess code:

.htaccess:

 
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 
So now everything is working, due to security Issues I reccomend to delete all CNAME records, otherwise someone may generate a cert for you!
Also you may ask if this tool is secure, and it is. We dont store any SSL certs/Private Keys!
Hope this helped you!
Edited by BastelPichi2
Link to post
Share on other sites
  • Chronos featured this topic

Hello,

Thank you for this tutorial it's easier to do than the one I did when you created an API tell me I would like to add it to my myownfreehost module for WHMCS to provide the simple way to have SSL (Of course you will be mentioned in the credits)

Link to post
Share on other sites
On 10/24/2021 at 8:23 PM, MS-DOS said:

Hello,

Thank you for this tutorial it's easier to do than the one I did when you created an API tell me I would like to add it to my myownfreehost module for WHMCS to provide the simple way to have SSL (Of course you will be mentioned in the credits)

Ok cool!

Link to post
Share on other sites
  • 2 weeks later...
On 11/14/2021 at 8:34 PM, BastelPichi2 said:

Ok, some updates:

- The tool will soon recive a client area.

- GoGetSSL functionallidy will be added soon

- after that, a script that automaticaly uploads the certs to vPanel and a function to POST the certs to a script, will be added.

Hopefully have them done soon!

Excited

 

On 11/14/2021 at 8:34 PM, BastelPichi2 said:

after that, a script that automaticaly uploads the certs to vPanel and a function to POST the certs to a script, will be added.

Especially for this one. Wonder how can you make it work

Link to post
Share on other sites
5 hours ago, Parimu Hosting for Student said:

I use yesterday, I chose new option is offered wildcard ssl. But, after request and install it is doesen't active wildcard yet. It is only for main (root) domain?

Hey,

It will only work for the root domain. Thats related to ifastnet/byet. I included the wildcard so you only have to create one CNAME record. SSL wildcards would be nice, but also a security potential as every of your cliebnts could do a man in tzhe middle attack to other clients. But generating a cert is fast and soon auttomatic, so that isnt really needed.

Link to post
Share on other sites
4 hours ago, BastelPichi2 said:

Hey,

It will only work for the root domain. Thats related to ifastnet/byet. I included the wildcard so you only have to create one CNAME record. SSL wildcards would be nice, but also a security potential as every of your cliebnts could do a man in tzhe middle attack to other clients. But generating a cert is fast and soon auttomatic, so that isnt really needed.

Okay, buta anywhere I get wilcard ssl for my clients subdomain? Like 000webhost or must be paid ssl?

Link to post
Share on other sites
  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...