AutoSSL/SSL problem

Fatal3rr0r

• February 01, 2018 10:49

Hi all, we have a big problem on autossl/ssl. On every renew the crt & key files are only stored in the user's home folder and we have to manually copy them to /var/cpanel/ssl/installed/certs & /var/cpanel/ssl/installed/keys. Then we need to add in /var/cpanel/userdata/USER/SITE_SSL: sslcacertificatefile: pathtocabundle sslcertificatefile: pathtocrt sslcertificatekeyfile: pathtokey Any hint? Thanks in advance

• 

  cPanelMichael

  • February 01, 2018 17:51

  Hello, Could you elaborate on the issue you are facing that's leading you to manually configure the certificate in that manner? You should not have to do that manually. Note the following modification to how SSL data is stored as of cPanel version 68: 68 Release Notes - Version 68 Documentation - cPanel Documentation Thank you.

  0
• 

  Fatal3rr0r

  • February 01, 2018 22:24

  We have Cpanel 68.0.28 and i forgot to say that we have nginx 1.10.2 installed too! We're not using custom ssl templates. Initially, customers warned us about the SSL problem on their site... and i found that rebuilding all nginx vhost will give me an hint about vhosts with ssl problems. The problem currently presents with Let's Encrypt certificates in autossl. Everything on the user's cpanel UI seems ok... the new certificate is installed correctly. The certificate is automatically installed in the user's folder (/home/USER/ssl/certs/) but is not copied to the cpanel folder (/var/cpanel/ssl/installed/certs) and the same applies to the key. When nginx tries to rebuild vhost on that user this is what happens: Generating nginx HTTP configuration file for ***SITE*** on ... /usr/local/nginx/conf/vhost.d/***SITE***.conf Traceback (most recent call last): File "/scripts/nginxctl", line 3, in import cpnginx File "/usr/local/cpanel/scripts/cpnginx/__init__.py", line 1, in import nginx File "/usr/local/cpanel/scripts/cpnginx/nginx.py", line 5, in choice.options() File "/usr/local/cpanel/scripts/cpnginx/choice.py", line 100, in options core.rebuilduservhost(cpuser) File "/usr/local/cpanel/scripts/cpnginx/core.py", line 327, in rebuilduservhost vhostdata_ssl = vhost.build_vhost(userdata[domain],havessl,havedip,firewall,settings) File "/usr/local/cpanel/scripts/cpnginx/vhost.py", line 370, in build_vhost build_ssl_cert(userdata[0]) File "/usr/local/cpanel/scripts/cpnginx/vhost.py", line 160, in build_ssl_cert with open(cert)as certfile: UnboundLocalError: local variable 'cert' referenced before assignment This is from the cpanel's error_log: [2018-01-14 21:05:05 +0100] info [uapi] Script hook returned an invalid response: [2018-01-14 21:05:05 +0100] info [uapi] script: /usr/local/cpanel/scripts/cpnginx/hooks/rmssldom.py [2018-01-14 21:05:05 +0100] info [uapi] response: Generating nginx HTTPESC[0m configuration file for ***SITE*** on ... /usr/local/nginx/conf/vhost.d/***SITE***.conf 1 [2018-01-14 21:05:05 +0100] info [uapi] -- End Garbage output -- [2018-01-14 21:06:02 +0100] info [queueprocd] AutoSSL::CertificateInstalled Notification => ***EMAIL*** via EMAIL [eventimportance => High (1)] [2018-01-14 21:06:41 +0100] info [uapi] STDERR output from hook: /usr/local/cpanel/scripts/cpnginx/hooks/ssldom.py [2018-01-14 21:06:41 +0100] info [uapi] Traceback (most recent call last): File "/usr/local/cpanel/scripts/nginxctl", line 3, in import cpnginx File "/usr/local/cpanel/scripts/cpnginx/__init__.py", line 1, in import nginx File "/usr/local/cpanel/scripts/cpnginx/nginx.py", line 5, in choice.options() File "/usr/local/cpanel/scripts/cpnginx/choice.py", line 94, in options core.rebuildvhost(rvhdom) File "/usr/local/cpanel/scripts/cpnginx/core.py", line 291, in rebuildvhost vhostdata_ssl = vhost.build_vhost(userdata[domain],havessl,havedip,firewall,settings) File "/usr/local/cpanel/scripts/cpnginx/vhost.py", line 370, in build_vhost build_ssl_cert(userdata[0]) File "/usr/local/cpanel/scripts/cpnginx/vhost.py", line 160, in build_ssl_cert with open(cert)as certfile: UnboundLocalError: local variable 'cert' referenced before assignment Traceback (most recent call last): File "/usr/local/cpanel/scripts/cpnginx/hooks/ssldom.py", line 56, in main() File "/usr/local/cpanel/scripts/cpnginx/hooks/ssldom.py", line 52, in main out=backport.check_output(cmd,shell=True) File "/usr/local/cpanel/scripts/cpnginx/hooks/backport.py", line 18, in check_output raise error subprocess.CalledProcessError: Command '/usr/local/cpanel/scripts/nginxctl rebuildvhost ***SITE***' returned non-zero exit status 1 Adding the three lines to the files manually resolves the problem... but I hope you help me to fix it in someway... Thanks

  0
• 

  cPanelMichael

  • February 02, 2018 15:56

  Hello, Nginx is a third-party application that we do not offer support for. I recommend reporting this issue to the plugin developer of the specific Nginx plugin you are using so they can advise you of the best approach to solve the issue. Additionally, I encourage you to vote for the following feature requests: Stand-alone nginx supported as an alternative to Apache Nginx proxied to Apache (not standalone Nginx) Thank you.

  0

Please sign in to leave a comment.