Symptoms
Logging into WHM when the certificate has expired will result in an error similar to this one appearing:
License File Expired: LTD: 1644536928 NOW: 1644571639
You may also see entries like this in /usr/local/cpanel/logs/license_log:
Sat Feb 5 10:49:28 2022: Transition to SSL failed on 2089: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Description
You may verify your server's license here, but what if the license is not expired and you're seeing this message?
Have the CA bundle files been altered on your server? You can verify this by running the following command:
rpm -vV ca-certificates
If you see lines that look like these then this could be the cause of the license message:
SM5...... /etc/pki/tls/certs/ca-bundle.crt SM5...... /etc/pki/tls/certs/ca-bundle.trust.crt
The licensing system requires a secure working connection, and removing or altering the certificate it uses will cause the server to no longer receive license updates. After some time, the server will start saying the license has expired because it has not been able to refresh the license file on the server.
Workaround
First, take a copy of the directory, then reinstall the ca-certificates package
cp -ra /etc/pki /etc/pki.bkup
yum reinstall ca-certificates
Once this has been done, try to update the license:
/usr/local/cpanel/cpkeyclt
It should succeed now. If it still fails, please open a ticket with our support department to investigate the issue.