404Forbiden

✏️ Editing: install-cert-to-cpanel.sh

#!/bin/bash
# /usr/local/bin/install-cert-to-cpanel.sh
set -e

LOG_FILE="/var/log/certbot-cpanel-install.log"

log_message() {
    echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" | tee -a "$LOG_FILE"
}

log_message "Starting certificate installation"

if [ -z "$RENEWED_LINEAGE" ]; then
    log_message "ERROR: Not running from Certbot hook"
    exit 1
fi

CERT_PATH="$RENEWED_LINEAGE"
log_message "Certificate path: $CERT_PATH"
log_message "Domains in certificate: $RENEWED_DOMAINS"

# Verify certificate files exist
for file in cert.pem privkey.pem chain.pem; do
    if [ ! -f "$CERT_PATH/$file" ]; then
        log_message "ERROR: Missing $file"
        exit 1
    fi
done

# Get primary domain
PRIMARY_DOMAIN=$(echo "$RENEWED_DOMAINS" | cut -d' ' -f1)
log_message "Primary domain: $PRIMARY_DOMAIN"

# Install certificate for primary domain
log_message "Installing certificate for primary domain: $PRIMARY_DOMAIN"

RESULT=$(/usr/local/cpanel/bin/whmapi1 installssl \
  domain="$PRIMARY_DOMAIN" \
  crt=@"$CERT_PATH/cert.pem" \
  key=@"$CERT_PATH/privkey.pem" \
  cab=@"$CERT_PATH/chain.pem" 2>&1)

echo "$RESULT" >> "$LOG_FILE"

if echo "$RESULT" | grep -q "result: 1"; then
    log_message "✓ Certificate installed successfully for $PRIMARY_DOMAIN"
else
    log_message "✗ ERROR: Certificate installation failed for $PRIMARY_DOMAIN"
    log_message "$RESULT"
    exit 1
fi

# Install certificate for all additional domains (SANs)
for domain in $RENEWED_DOMAINS; do
    # Skip the primary domain as it's already installed
    if [ "$domain" = "$PRIMARY_DOMAIN" ]; then
        continue
    fi

log_message "Installing certificate for additional domain: $domain"

RESULT=$(/usr/local/cpanel/bin/whmapi1 installssl \
      domain="$domain" \
      crt=@"$CERT_PATH/cert.pem" \
      key=@"$CERT_PATH/privkey.pem" \
      cab=@"$CERT_PATH/chain.pem" 2>&1)

echo "$RESULT" >> "$LOG_FILE"

if echo "$RESULT" | grep -q "result: 1"; then
        log_message "✓ Certificate installed successfully for $domain"
    else
        log_message "✗ WARNING: Certificate installation failed for $domain (may not have a cPanel account)"
        log_message "$RESULT"
        # Don't exit - continue with other domains
    fi
done

log_message "Certificate installation completed successfully"

Sid Gifari From Gifari Industries - BD Cyber Security Team