AutoSSL Not Working
Autossl is not working anymore on one of our servers. When looking in the logs, it shows that it's trying to renew the certs. They also show up in the pending queue, but some of them have been pending for more than 2 days now.
The only change we've had is some modsec rules that block traffic from certain countries. However, I'm not sure if this would affect autossl or not.
-
Why did someone bother to move this but not reply to it? 0 -
The only change we've had is some modsec rules that block traffic from certain countries. However, I'm not sure if this would affect autossl or not.
You might try disabling the changes you made, force AutoSSL to check the sites again and see if that helps.0 -
Autossl is not working anymore on one of our servers. When looking in the logs, it shows that it's trying to renew the certs. They also show up in the pending queue, but some of them have been pending for more than 2 days now.
Hello @dstana, Can you browse to WHM >> Manage AutoSSL and let us know the specific output under the Logs tab for one of the affected accounts? Ensure to replace real domain names and IP addresses with examples when pasting the output. Thank you.0 -
Hello, So I turned off the rules I added this weekend and the SSL's went through. I found a GET for .well-known/pki-validation that always comes from the same IP. It looks like one of 1&1's IP's, I'm wondering I can do something like: SecRule REMOTE_ADDR "^192\.168\.1\.100$" phase:1,id:95,nolog,allow
In front of the country rules to let traffic from that IP through.0 -
Hello @dstana, Yes, it's a good idea to whitelist the IP addresses Comodo uses to make connections to your server for the purpose of domain validation. Here's a list of IP addresses they use: 178.255.81.12 178.255.81.13 91.199.212.132 199.66.201.132
Thank you.0 -
Thanks, that's exactly what I needed. 0
Please sign in to leave a comment.
Comments
6 comments