Service generated warnings while checking SSL certificates
I am getting the following error email notification "service generated warnings while checking SSL certificates."
I opened a ticket and was advised:
Because your servers hostname does not resolve to an IP, the system is unable to complete checks in order to complete the SSL installation.
In order to address this, the hostname should be updated to a FQDN.
I have changed the host name and still getting this error. I there anything else I can try?
-
I contacted Godaddy and they said this has been happening on other servers. They just pointed me to the documentation to change the hostname. Should I ignore it? Also can I delete the old DNS zone after my hostname has changed? 0 -
Hello @Bloke2, Can you share the output from the below command? /usr/local/cpanel/bin/checkallsslcerts --verbose
Ensure to replace real domain names and IP addresses with examples when pasting the output here. Thank you.0 -
The system will check for the certificate for the "dovecot" service. The system will attempt to replace the self-signed certificate for the "dovecot" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "dovecot" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "dovecot" service. The system will check for the certificate for the "exim" service. The system will attempt to replace the self-signed certificate for the "exim" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "exim" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "exim" service. The system will check for the certificate for the "ftp" service. The system will attempt to replace the self-signed certificate for the "ftp" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "ftp" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "ftp" service. 0 -
Hello @Bloke2, Can you verify if the DNS zone associated with the server's hostname makes use of an AAAA record for IPv6? You can view the DNS zone for the server's hostname or the hostname's parent domain in WHM >> Edit DNS Zone. Thank you. 0 -
No it just has A record. Any the previous host name did also. 0 -
Hello, To update, it looks like the license provider imposes a restriction that prevents the use of the free signed hostname SSL certificate service. Thank you. 0
Please sign in to leave a comment.
Comments
8 comments