Re-generate SSL for server hostname?

mvandemar

• July 31, 2018 00:07

I just finished setting up a new server, but I didn't realize that it had the wrong hostname when I initially set things up, it was vps2.domain.com instead of vps3.domain.com. Is there a way to have it regenerate the server ssl certficate? It's currently set to the wrong domain name, and I don't see an interface for just this. The subdomain is not showing when I go to Manage SSL Hosts, and anything else I see under AutoSSL is just for the individual users and not for the server hostname. I re-ran /usr/local/cpanel/bin/checkallsslcerts, but I am guessing it didn't do anything since the vps2 ssl cert is installed, valid, and doesn't expire until July 30, 2019 Thanks. -Michael

• 

  cPanelMichael

  • July 31, 2018 18:45

  Hello Michael, The /usr/local/cpanel/bin/checkallsslcerts script should run automatically upon changing the server's hostname using WHM >> Change Hostname. Can you ensure the hostname is updated using this option and let me know if the corresponding SSL certificate for the hostname is updated? Thank you.

  0
• 

  mvandemar

  • July 31, 2018 18:57

  The hostname was already set to vps3, but I clicked the Update button again. The output log showed that it ran, but there was no reference to checkallsslcerts in that log, just cphulkd, exim, and mysqld. The cert is still showing as the vps2 self signed one. -Michael

  0
• 

  cPanelMichael

  • July 31, 2018 18:59

  New The hostname was already set to vps3, but I clicked the Update button again. The output log showed that it ran, but there was no reference to checkallsslcerts in that log, just cphulkd, exim, and mysqld. The cert is still showing as the vps2 self signed one.

  
  Hello, Can you let us know the output upon running the command below? /usr/local/cpanel/bin/checkallsslcerts --verbose
  Replace references to real domain names with examples. Thanks!

  0
• 

  mvandemar

  • July 31, 2018 19:03

  # /usr/local/cpanel/bin/checkallsslcerts --verbose The system will check for the certificate for the "cpanel" service. The system will attempt to verify that the certificate for the "cpanel" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "cpanel" service passed all checks. The system will check for the certificate for the "dovecot" service. The system will attempt to verify that the certificate for the "dovecot" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "dovecot" service passed all checks. The system will check for the certificate for the "exim" service. The system will attempt to verify that the certificate for the "exim" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "exim" service passed all checks. The system will check for the certificate for the "ftp" service. The system will attempt to verify that the certificate for the "ftp" service is still valid using OCSP (Online Certificate Status Protocol). The certificate for the "ftp" service passed all checks.
  No references to any domains. -Michael

  0
• 

  cPanelMichael

  • July 31, 2018 19:22

  Hello Michael, Can you open a

  0
• 

  mvandemar

  • July 31, 2018 19:47

  @cPanelMichael Thanks! #10025417. -Michael

  0
• 

  mvandemar

  • July 31, 2018 20:01

  Update: of course as soon as I opened the ticket the correct certificate started showing up. :) -Michael

  0
• 

  cPanelMichael

  • July 31, 2018 20:43

  Update: of course as soon as I opened the ticket the correct certificate started showing up.

  
  Hello, I'm glad to see the issue is now solved. It's likely the AutoSSL validation process simply needed a little more time to finish (validation isn't instant). Thanks!

  0

Please sign in to leave a comment.