Apache not serving new certificates after AutoSSL

willkruss

• April 24, 2018 20:06

Hi All, We run hundreds of cPanel VPSs, the last week we've had three clients servers who had certificates successfully replaced by AutoSSL, they were listed correctly in the Manage SSL Hosts, however, the old certificate was still being served by Apache. Restarting Apache through WHM also did not help (note we also tried restarting PHP-FPM service with no luck, but only 1 of the 3 servers was using it). Restarting the server fixed the issue. This is not a browser caching issue as ssllabs also reported the old cert. As soon as we rebooted the server the new certificate started being served. Is this a bug in a recent update? Thanks, Will Kruss

• 

  24x7server

  • April 25, 2018 08:14

  Hi,

  Is this a bug in a recent update?

  
  No that is not a bug. This type of situation is found in server with Nginx as proxy.. Do you have Apache as frontend webserver or you have Nginx or litespeed in front?

  0
• 

  willkruss

  • April 25, 2018 08:25

  Hi, No that is not a bug. This type of situation is found in server with Nginx as proxy.. Do you have Apache as frontend webserver or you have Nginx or litespeed in front?

  
  Unfortunately we are well aware of that issue, we host hundreds of cPanel servers, however, none of these servers have NGinx or LiteSpeed.

  0
• 

  cPanelLauren

  • April 25, 2018 13:36

  Hello @willkruss Can you confirm if the new certificate is being loaded into apache or is it still the old one? This will be noted in the SSLCertificateFile line of the SSL VirtualHost in the apache configuration.

  0
• 

  willkruss

  • April 25, 2018 23:04

  Hello @willkruss Can you confirm if the new certificate is being loaded into apache or is it still the old one? This will be noted in the SSLCertificateFile line of the SSL VirtualHost in the apache configuration.

  
  Unfortunately as rebooting seems to fix it, I don't believe that the problem is with the actual config files, however, I cannot confirm until it reoccurs. Next time I'll have a closer look before restarting the server and will update the ticket then.

  0
• 

  cPanelLauren

  • April 26, 2018 11:57

  Hi @willkruss I see, that almost sounds like something is being cached, I'd definitely like to know if the correct certificate is being reflected prior to reboot. Thank you,

  0

Please sign in to leave a comment.