<div dir="ltr">Whoops,<br><br>I can tell cPanel which IP address to use but I can't pick both of them. So Apache doesn't have an entry for the second IP address. I can manually add one, but the problem is it'll get replaced every night with one generated from the templates. I might be able to just manually edit the template and add a line that adds the VirtualHost entry for the second IP address, but I'm not exactly sure how I'd do it. <br><br>The templates are a bit weird. Here's what the beginning of the ssl_vhost.local template.<br><br><div><VirtualHost[% FOREACH ipblock IN vhost.ips %] [% ipblock.ip %]:[% ipblock.port %][% END %]></div><div> # Enable HTTP Strict Transport Security</div><div> Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"</div><div><br></div><div> ServerName [% wildcard_safe(vhost.servername) %]</div><div>[% IF vhost.serveralias_array.size -%]</div><div>[% FOREACH alias IN vhost.serveralias_array -%]</div><div> ServerAlias [% alias %]</div><div>[% END -%]</div><div>[% ELSE -%]</div><div> ServerAlias [% vhost.serveralias %]</div><div>[% END -%]</div><div><br><br>There's a bunch of templates, like main.default, vhost.default and ssl_vhost.default. If I want to customize them, I make a copy and replace the .default extension with the .local extension and then cPanel will use my custom .local instead of the .default.<br><br>I think we're good though. If I had Apache listening on the second IP address, I think everything would have been fine. I believe I accomplished what I wanted to accomplish. When we move into the new house, I'll setup a server in the work room and I'll get a static IP and try again then, with two different servers instead of one.<br><br>Thanks for all the help!</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 21, 2016 at 2:00 PM, Spork Schivago <span dir="ltr"><<a href="mailto:sporkschivago@gmail.com" target="_blank">sporkschivago@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Okay, I do think it was working correctly. I think that's why I was getting the <span style="font-family:Helvetica,Arial,sans-serif;font-size:14px;line-height:19px">ERR_SSL_PROTOCOL_ERROR</span> in Chrome when I went to my site when I had the second IP address added, but other users weren't. I think the users getting the error message in Chrome were pulling the second IP address from their DNS servers, but the people who successfully could go to their site where getting the first IP address and could successfully see my site.<br><br>I can try to explain the cPanel / Apache stuff a bit better. I have an Apache config file, /usr/local/apache/conf/httpd.conf. There's a bunch of comments that say don't edit this file directly. Use the cPanel interface or the "templates". cPanel has these templates and we run a script to rebuild the config file. It'll automatically populate it with stuff like:<br><br><VirtualHost <a href="http://104.238.117.105:443" target="_blank">104.238.117.105:443</a>><br><br>I can tell cPanel which IP address to use but I can't pick both of them. So Apache doesn't have <div><div class="h5"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 21, 2016 at 2:49 AM, Matus UHLAR - fantomas <span dir="ltr"><<a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><span>On 20.07.16 21:40, Spork Schivago wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
I don't remember the tools, but I know that the way cPanel handles stuff<br>
with Apache, it broke my website for me. Using the cPanel / WHM<br>
interface, I could tell Apache to listen on one IP or the other, not both,<br>
unfortunately. Some people (my wife's cell for instance) could make it to<br>
my site, but on her laptop, I could not. I believe this is because I<br>
redirect everything to port 443 and the SSL certs were setup for the first<br>
IP, not the second.<br>
</blockquote>
<br></span>
huh? SSL certs should be created with required hostname, e.g.<br>
<a href="http://franklin.jetbbs.com" rel="noreferrer" target="_blank">franklin.jetbbs.com</a> in CommonName - not the IPs. <br>
you just need transfer both public and private keys to other server...<br>
just watch out if you don't make the private key available to others.<span><br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
I believe when I assigned the second IP address to<br>
the A record <a href="http://jetbbs.com" rel="noreferrer" target="_blank">jetbbs.com</a>, sometimes I'd go to the first IP and Apache would<br>
pick it up, other times, I'd go to the second IP and Apache wouldn't know<br>
how to handle it. Maybe it was because the SSL certs were created when I<br>
only had the one IP, I don't know. But it really messed things up and I<br>
had to remove the second IP again. I think if I manually edited the<br>
httpd.conf file and regenerated the SSL certs, things might have started<br>
working.<br>
</blockquote>
<br></span>
this is your problem. don't generate ssl keys when adding IPs.<span><br>
<br>
<br>
-- <br>
Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" rel="noreferrer" target="_blank">http://www.fantomas.sk/</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br></span>
We are but packets in the Internet of life (<a href="http://userfriendly.org" rel="noreferrer" target="_blank">userfriendly.org</a>)<div><div><br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</div></div></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div>