Johnny Ssl

[guysalias]

Hello,

I did not buy an SSL account. However cPanel has issued certificates.
Is this a configuration snafu, or may I publish HTTPS URIs?

Thank you.

$ curl -ILv https://guysalias.tk/ https://xnews-icon-patchers.tk/
*   Trying 64.62.211.131...
* TCP_NODELAY set
* Connected to guysalias.tk (64.62.211.131) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: \bin\ca-bundle.crt
  CApath: \bin\capath\
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: CN=guysalias.tk
*  start date: Dec  9 00:00:00 2016 GMT
*  expire date: Mar  9 23:59:59 2017 GMT
*  subjectAltName: host "guysalias.tk" matched cert's "guysalias.tk"
*  issuer: C=US; ST=TX; L=Houston; O=cPanel, Inc.; CN=cPanel, Inc. Certification Authority
*  SSL certificate verify ok.
> HEAD / HTTP/1.1
> Host: guysalias.tk
> User-Agent: curl
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Mon, 12 Dec 2016 15:11:12 GMT
Date: Mon, 12 Dec 2016 15:11:12 GMT
< Server: Apache
Server: Apache
< Last-Modified: Fri, 09 Dec 2016 05:02:24 GMT
Last-Modified: Fri, 09 Dec 2016 05:02:24 GMT
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Content-Length: 2394
Content-Length: 2394
< Content-Type: text/html
Content-Type: text/html

<
* Curl_http_done: called premature == 0
* Connection #0 to host guysalias.tk left intact
*   Trying 64.62.211.131...
* TCP_NODELAY set
* Connected to xnews-icon-patchers.tk (64.62.211.131) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: \bin\ca-bundle.crt
  CApath: \bin\capath\
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: CN=xnews-icon-patchers.guysalias.tk
*  start date: Dec 11 00:00:00 2016 GMT
*  expire date: Mar 11 23:59:59 2017 GMT
*  subjectAltName: host "xnews-icon-patchers.tk" matched cert's "xnews-icon-patchers.tk"
*  issuer: C=US; ST=TX; L=Houston; O=cPanel, Inc.; CN=cPanel, Inc. Certification Authority
*  SSL certificate verify ok.
> HEAD / HTTP/1.1
> Host: xnews-icon-patchers.tk
> User-Agent: curl
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Mon, 12 Dec 2016 15:11:13 GMT
Date: Mon, 12 Dec 2016 15:11:13 GMT
< Server: Apache
Server: Apache
< Last-Modified: Fri, 09 Dec 2016 17:37:28 GMT
Last-Modified: Fri, 09 Dec 2016 17:37:28 GMT
< Accept-Ranges: bytes
Accept-Ranges: bytes
< Content-Length: 3745
Content-Length: 3745
< Content-Type: text/html
Content-Type: text/html

<
* Curl_http_done: called premature == 0
* Connection #1 to host xnews-icon-patchers.tk left intact

$

Edited December 12, 2016 by guysalias

[wolstech]

Johnny no longer requires a dedicated IP address. You should just be able to install a certificate and have it work.