AutoSSL warning when current CAA records of the domain denies certificate creation
Hi!
After adding a new subdomain I found AutoSSL didn't created the SSL certificate for the subdomain.
Looking to the logs I saw this:
[2019-11-13T17:17:12Z] Attempting to ensure the existence of necessary CAA records
[2019-11-13T17:17:12Z] No CAA records were created.
[2019-11-13T17:17:12Z] Verifying cPanel (powered by Sectigo)
[2019-11-13T17:17:12Z] CA forbidden: xxxx.domain.com
[2019-11-13T17:17:12Z] AutoSSL cannot increase xxxxx
These lines said the dns zone doesn't had CAA records allowing the creation of the certificate. The DNS Zone had let's encrypt CAA and comodo/comodoca CAA records. Those CAA records worked perfectly until now.
The problem seems to be cPanel it's now requesting the certs from sectigo, so we need to add sectigo.com CAA records to the dns zone.
What about a warning or a simple message with that information in cPanel?
Please sign in to leave a comment.
Comments
0 comments