AutoSSL certificate expired could not renew message
Hello,
I have a cPanel version v68.0.36. I"ve got a mail
52115
Now the AutoSSL certificate is expired
52119
Do I have manually run command via WHM "Run AutoSSL for All Users" or cPanel should renew automatically AutoSSL certificate?
Best regards,
Elizabeta
-
Hi @Elizabeta The AutoSSL process runs daily so you shouldn't have to manually run it but in the event that a domain failed domain control validation, I would suggest manually running it after you've identified what the issue causing it to fail is and you've resolved it. If the domain's SSL expired and you're receiving that notification it does indicate that for some reason it failed validation. I would suggest checking the logs to identify specifically why it's failing. Thanks! 0 -
Hello, Thank you Lauren for your explanation. To manually running AutoSSL, is it necessary to run WHM-Home-SSL/TLS-Manage AutoSSL-Run AutoSSL for All Users or, is there option to run AutoSSL for just one user (which has expired AutoSSL)? Best regards, Elizabeta 0 -
is there option to run AutoSSL for just one user
There are options for this, here: WebHost Manager "SSL/TLS "Manage AutoSSL, Manage Users tab0 -
you can have the option to select a user within the autossl interface, then you must also review the autossl logs, 0 -
HI @Elizabeta As mentioned by @sktest123 it is not necessary to run for all users. If you go to WHM>>SSL/TLS/Manage AutoSSl -> Manage Users you can select users per user to check. You can also use the whmapi1 function here WHM API 1 Functions - start_autossl_check_for_one_user - Developer Documentation - cPanel Documentation Alternatively you can run the following to check one user as well: /usr/local/cpanel/bin/autossl_check --user=$user0 -
Hello, thank you for your replies. Just one information, domain which is not passed validity is not registered. This is test domain. Probably this is problem with AutoSSL. Best regards, Elizabeta Kre"o 0 -
Hi @Elizabeta If you have unregistered domains or domains you know won't pass the DCV check because they don't resolve to the server you can exclude them through cPanel>>Security>>SSL/TLS Status You can also disable the AutoSSL feature per account at WHM>>SSL/TLS>>Manage AutoSSL Thanks! 0 -
Thank you Lauren for your explanation, but in my version of cPanel v68.0.3 I don"t have a option cPanel>>Security>>SSL/TLS Status, I have just Home-SSL/TLS status .. or Home-Security Center .. Best regards, Elizabeta 0 -
HI @Elizabeta If you don't have that in v68 it's probably not included in the account's feature list. You can modify the feature list for the package to include this or you can disable through WHM as noted previously. Thanks! 0 -
Hello, Thank you Lauren! I have one more question. I have registered domain (before this domain was unregistered and AutoSSL certificate is expired). Is it ok to run this command to install AutoSSL certificate for this domain /usr/local/cpanel/bin/checkallsslcerts ? Best regards, Elizabeta 0 -
HI @Elizabeta I have registered domain (before this domain was unregistered and AutoSSL certificate is expired). Is it ok to run this command to install AutoSSL certificate for this domain /usr/local/cpanel/bin/checkallsslcerts ?
As long as the domain is registered and hosted on the server that should be fine Personally, for domains you want to check via AutoSSL I would run: Per user:/usr/local/cpanel/bin/autossl_check --user=$user
All domains with AutoSSL enabled/usr/local/cpanel/bin/autossl_check --all
And I'd just run checkallsslcerts for hostname certificates. Thanks!0 -
Hello, Thank you very much for your answer Lauren! Best regards, Elizabeta 0 -
You're most welcome @Elizabeta, Happy to have been able to help! 0
Please sign in to leave a comment.
Comments
14 comments