![\"\"](\"https:\/\/miro.medium.com\/max\/875\/1*QH6jVMMEjgIHJqWx33f9tA.png\")
<\/figure>\n\n\n\nChange the downloaded key\u2019s extension to .txt (optional) and then change its permission:<\/p>\n\n\n\n
chmod 600 ~\/.ssh\/filename.txt<\/pre>\n\n\n\n2. Adding your SSH key passphrase to the ssh-agent<\/h1>\n\n\n\n
This allow us to login securely and automatically<\/p>\n\n\n\n
ssh-add -K ~\/.ssh\/id_rsa<\/pre>\n\n\n\n3. SSH into Cpanel<\/h1>\n\n\n\n
ssh -i ~\/.ssh\/filename.txt username@ip<\/pre>\n\n\n\n4. Download and install acme.sh<\/h1>\n\n\n\n
curl https:\/\/get.acme.sh | sh
Or:
wget -O - https:\/\/get.acme.sh | sh<\/pre>\n\n\n\n5. Exit the shell and re-login to make the alias working<\/h1>\n\n\n\n
exit<\/pre>\n\n\n\n6. Issue SSL certificate (web-root method)<\/h1>\n\n\n\n
UPDATE: Set Default CA to LetsEncrypt<\/strong><\/p>
acme.sh \u2014 set-default-ca \u2014 server letsencrypt<\/p><\/blockquote>\n\n\n\n
acme.sh --force --issue -d example.com -d www.example.com -w \/home\/username\/public_html<\/pre>\n\n\n\n7. Deploy the certs to your CPanel host<\/h1>\n\n\n\n
Lets set some constants first<\/p>\n\n\n\n
You only need to do this once<\/em><\/p>\n\n\n\n
export DEPLOY_CPANEL_USER=myusername
export DEPLOY_CPANEL_PASSWORD=PASSWORD<\/pre>\n\n\n\nTime to deploy the<\/p>\n\n\n\n
acme.sh --deploy -d example.com -d www.example.com --deploy-hook cpanel<\/pre>\n\n\n\n8. Deploy SSL to CPanel using UAPI<\/h1>\n\n\n\n
This hook is using UAPI and works in cPanel & WHM version 56 or newer.<\/p>\n\n\n\n
DEPLOY_CPANEL_USER is required only if you run the script as root and it should contain cpanel username.<\/p>\n\n\n\n
export DEPLOY_CPANEL_USER=usernameacme.sh --deploy -d example.com -d www.example.com --deploy-hook cpanel_uapi<\/pre>\n\n\n\nPlease note, that the cpanel_uapi hook will deploy only the first domain when your certificate will automatically renew. Therefore you should issue a separate certificate for each domain.<\/p>\n\n\n\n
Note: the cron job to auto-renew SSL certificate is also set-up<\/strong><\/p><\/blockquote>\n\n\n\n
9.You are done. Check the cron job by the following.<\/h1>\n\n\n\n
crontab -l
23 0 * * * \"\/home\/user\/.acme.sh\"\/acme.sh --cron --home \"\/home\/user\/.acme.sh\" > \/dev\/null<\/pre>\n\n\n\n10. Updating .htaccess file<\/h1>\n\n\n\n
Hosts doesn\u2019t automatically redirect from the insecure (http) version of the site to the secure (https) version.<\/p>\n\n\n\n
Here\u2019s how to do just that:<\/p>\n\n\n\n
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
RewriteCond %{HTTP_HOST} ^www\\.(.+)$ [NC]
RewriteRule ^ https:\/\/%1%{REQUEST_URI} [R=301,L]
<\/IfModule><\/pre>\n","protected":false},"excerpt":{"rendered":"1. Enable SSH and setup access key Go to your Cpanel and Enable SSH. Then scroll down till you find the Security Section and click on SSH Access. Click on Manage Keys then Generate a key and download the private key to your local machine (ideally in ~\/.ssh). Take a note of the passphrase we will need in ..<\/p>\n