NameCheap and LetsEncrypt SSL

[Gr00t007]

Is there a way to auto renew the LetsEncrypt SSLs via Cpanel in a shared hosting?

That 90 days expiry date sucks.

 

[DanDD]

just get cloudflare..

 

[cgimaster]

AFAIK cPanel have schedulers to auto renew let's encrypt by default.

On my dedicated I can also see that option and on my shared hosting domains they also get auto renewed.

So you might want to check with your hosting provider why, its not auto renewing.

 

[Gr00t007]

AFAIK cPanel have schedulers to auto renew let's encrypt by default.

On my dedicated I can also see that option and on my shared hosting domains they also get auto renewed.

So you might want to check with your hosting provider why, its not auto renewing.

I have been working with static sites, so don't know much about this. Is there a let's encrypt app in Cpanel? Or just that usual SSL setup?

 

[Miraz0]

LetsEncrypt does give you a cron task info on how to automatically renew. Its a single line code anyway.

See here: https://certbot.eff.org/docs/using.html#renewing-certificates

I would suggest making a cron job with the certbot renew command to run every 3 months:

0 8 1 */3 * certbot renew

 

[cgimaster]

No cronjob needed.

Yes, cPanel have a whole Let's Encrypt module which takes care of everything from installing the certificate to updating it when the time comes.

cPanel also offers you another free alternative aside from Let's Encrypt.

 

[Stavro]

Yes, cPanel have a whole Let's Encrypt module which takes care of everything from installing the certificate to updating it when the time comes.

NameCheap has went on record saying that they do not and will not support auto-renewal of free SSL certificates. They support the paid certificate options that can be bought as add-ons, but free certificates are only allowed through a manual upload every 90 days.

 

[cgimaster]

So they disabled the cPanel feature to auto update to force people to actually purchase certificates or some other reason, what a shame.

In that case yeah you would have to use a cronjob to call the cPanel API to renew the certificate and honestly I am not sure if the cPanel API exposes the let's encrypt features when the features in question are disabled.

 

[10zen]

I am manually doing it from sslforfree.com

Check this for auto update:

https://gist.github.com/Shourai/bfd9f549a41c836c99c0c660c9271df6

Someone said to use uapi and shit. I don't understand code stuffs.

Plz simplify how to do that in cron settings if anyone got it working and know it.

 

[MSRP]

CPanel shared hosting on NC will renew your Let's Encrypt automatically. Have you ask to support department about this?

 

[cgimaster]

This one seems to have everything you need to automate the whole process including the call to the cPanel API to change the expired certificate, however its dated so it might need updates...

https://www.juliogonzalez.es/lets-e...t-native-support-for-example-at-namecheap/352

I gave it a quick look and the code seems fine.

CPanel shared hosting on NC will renew your Let's Encrypt automatically. Have you ask to support department about this?

They said above that namecheap have disabled it from their custom cPanel.

 

[Stavro]

So they disabled the cPanel feature to auto update to force people to actually purchase certificates or some other reason, what a shame.

They have an auto-update feature, which is exclusive to paid certificates sold by NameCheap. Their excuse is that free SSL is a "security risk", so it cannot be enabled on shared accounts.
Note the Mod replies under this post: https://www.namecheap.com/support/k...-do-i-install-an-ssl-using-your-cpanel-plugin

Unfortunately, this is not an uncommon practice when it comes to shared hosting providers who are also SSL resellers.

 

[Gr00t007]

Thanks for sharing the info. Looking at that code stuff makes me feel uneasy xD

Wish there was a module in Cpanel .If anyone knowing about this has some time to waste, please do a little spoonfed guide to install and renew the certificates.

 

[cgimaster]

Well the link I've sent above is a guide on how to do it and it seemed very detailed... Since you're not the system administrator you will not be able to active any features that have been disabled by them so you will unhappily have to go a custom route or change the hosting to one that does not disable let's encrypt on cPanel, if that really bothers you.