Renews one cPanel website certificate with AutoSSL takeover and TLS checks.
What happens
- The appliance connects to cPanel through cPanel UAPI on port 2083.
- Select a website on its owning cPanel account. The agent checks name coverage and excludes the website’s covered names from AutoSSL when its list can be read.
- UAPI installs certificate, key and CA bundle and updates the website. The agent reads back the leaf and checks HTTPS 443 with the domain as SNI for up to 60 seconds.
Technical details
- Connection
- The package runs on the appliance, which connects over HTTPS to cPanel UAPI, port 2083. No agent is installed.
- Service ports
- 2083
- You need
- cPanel > Security > Manage API Tokens > Create: give the token a name and choose no expiry or an expiry date. Enter the cPanel account name as user and the token as password/token. The account needs the SSL/TLS feature (sslinstall). Use the account that owns the website.
- Platform
- cPanel UAPI, API tokens 80+
- Actions
- Discovery, Installation, Verification, Rollback
- Packages
-
cpanel-api1.0.0 - Note
-
- Restoration uses cPanel’s retained certificate and matching key; a first installation can be removed. Rollback uses the certificate ID, deployed fingerprint and added AutoSSL exclusions and preserves later certificate changes. WHM service certificates are separate.
Certificate requirements
sslbrain offers: RSA 2048/4096, ECDSA P-256/P-384. Supply the certificate as PEM with a matching unencrypted key.