Skip to main content

None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.

Comments

6 comments

  • cPanelLauren
    How long ago did you request the certificate initially? (i.e., how long has it been processing?) Does the hostname resolve to the server? Do you have any apache includes that include customizations which would affect the hostname?
    0
  • superaca-nos
    12-14 hours from now. Yes, hostname is resolving to correct IP No, I do not have any customizations in includes
    0
  • cPanelLauren
    It sounds as though there's an issue with the processing of the certificate, in this case, because I am limited to what I can look into on the forums I'd suggest you open a ticket with us to have it investigated further. When you do open the ticket please update here with the Ticket ID and we'll update this thread with the outcome when available. Thanks!
    0
  • superaca-nos
    Support Request ID is: 13710161
    0
  • cPanelLauren
    Hello, I found this to be related to a CAA record in place for letsencrypt. In order to resolve this so that you'll be able to obtain a hostname certificate for the server you'll need to remove the CAA record for letsencrypt.org or modify it for Sectigo. [root@server ~]# dig CAA nosolutions.rs +short 128 issue "letsencrypt.org"
    Sectigo will accept the following per
    0
  • Unnamed User

    I ran this command:

     

    mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v

     

    Then this one:

     

    /usr/local/cpanel/bin/checkallsslcerts

    And it finally rechecked and reissued!

    0

Please sign in to leave a comment.