Skip to main content

Reset Service SSL Certificates

Comments

17 comments

  • cPanelLauren
    Hello @Nirjonadda This is dependent on what is covered in the SAN for the certificate. If www.hostname.tld is not covered it will not be included in the certificate properties.
    0
  • Nirjonadda
    www are not included in the certificate properties after Reset Service SSL Certificates but before this will be here.
    0
  • cPanelLauren
    www are not included in the certificate properties after Reset Service SSL Certificates but before this will be here.

    Again, this is based on what the certificate covers, you need to look at the certificate details, if it doesn't cover www. then it won't be included in the certificate properties.
    0
  • Nirjonadda
    Does happen any issue without www ? Also we have one issue after Reseting Service SSL Certificates.
    0
  • cPanelLauren
    This warning looks like there isn't a certificate installed on the hostname or it's a self-signed certificate. In a standard environment you wouldn't be connecting to the hostname with www.host.name.tld so there really shouldn't be issues if it's not covered.
    0
  • Nirjonadda
    So how can fixing this issue? Service SSL Certificates are not self-signed certificate?
    0
  • cPanelLauren
    If your SSL certificate is issue from a known CA, installed properly and not expired this shouldn't be occurring. Based on the screenshot you shared the certificate expired yesterday. What do you get when you run the following: /usr/local/cpanel/bin/checkallsslcerts
    0
  • Nirjonadda
    If your SSL certificate is issue from a known CA, installed properly and not expired this shouldn't be occurring. Based on the screenshot you shared the certificate expired yesterday.

    No, Yesterday I get email about The SSL certificate for "ftp" on "domain.com" will expire in less than 30 days. So I do reset.
    What do you get when you run the following: /usr/local/cpanel/bin/checkallsslcerts

    [root@na ~]# /usr/local/cpanel/bin/checkallsslcerts The system will check for the certificate for the "cpanel" service. The system will attempt to replace the self-signed certificate for the "cpanel" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "cpanel" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "cpanel" service. The system will attempt to install a certificate for the "cpanel" service from the cPanel store. The system will check for the certificate for the "dovecot" service. The system will attempt to replace the self-signed certificate for the "dovecot" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "dovecot" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "dovecot" service. The system will check for the certificate for the "exim" service. The system will attempt to replace the self-signed certificate for the "exim" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "exim" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "exim" service. The system will check for the certificate for the "ftp" service. The system will attempt to replace the self-signed certificate for the "ftp" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "ftp" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "ftp" service. The cPanel Store is processing the hostname certificate request. The system will check the cPanel Store again the next time that "/usr/local/cpanel/bin/checkallsslcerts" runs. [root@na ~]#
    0
  • cPanelLauren
    The cPanel Store is processing the hostname certificate request.
    This shows that the system is provisioning the hostname certificate. This process should have happened automatically but I assume it's because you reset the certificate.
    0
  • Nirjonadda
    How many time this will take provisioning the hostname certificate? Anyway can be provisioning the hostname certificate immediately?
    0
  • cPanelLauren
    Typically the process is fairly quick but in this instance, it seems there may be an issue holding it up. Feel free to PM the hostname of the server and I'll look at the internal system for you.
    0
  • cPanelLauren
    The issue here is occurring because the hostname did not resolve to an IP, the addition of an A record for the hostname will resolve this issue and the certificate is currently processing (approved and should be delivered shortly)
    0
  • Nirjonadda
    Please can you let me know that where can check hostname certificate are installed or not? WHM Home "SSL/TLS ? WHM Home "Service Configuration "Manage Service SSL Certificates?
    0
  • cPanelLauren
    You'll be able to see the new certificate when it's installed here: WHM Home "Service Configuration "Manage Service SSL Certificates
    0
  • Nirjonadda
    @cPanelLauren This issue happened again: The cPanel Store is processing the hostname certificate request.
    0
  • cPanelLauren
    It can take a few hours for a certificate to be installed. This isn't a process that is always immediate. It is dependent on Comodo's approval.
    0
  • Nirjonadda
    Yes! Fixed from cPanel support.
    0

Please sign in to leave a comment.