AutoSSL (cPanel/Sectigo) fails to automatically renew
Hi :)
In short, a cPanel/Sectigo certificate should have been renewed automatically by 3/4/20 but was not. The certificate was renewed manually and is now working.
I created
I don't think that the parked domain is the cause- we've experienced this problem in the past, prior to the parked domain being added. The following lines are present in .htaccess before every rewrite that we created:
As mentioned previously, Global DCV Passthrough solved this on another server, but I don't think that's an option here. I do see /.well-known/pki-validation on the server, but the folder is empty. Thanks!
I don't think that the parked domain is the cause- we've experienced this problem in the past, prior to the parked domain being added. The following lines are present in .htaccess before every rewrite that we created:
RewriteCond %{REQUEST_URI} !^/\.well-known/cpanel-dcv/[0-9a-zA-Z_-]+$
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/(?:\ Ballot169)?
RewriteCond %{REQUEST_URI} !^/\.well-known/pki-validation/[A-F0-9]{32}\.txt(?:\ Sectigo\ DCV)?$
As mentioned previously, Global DCV Passthrough solved this on another server, but I don't think that's an option here. I do see /.well-known/pki-validation on the server, but the folder is empty. Thanks!
-
Are you at all aware if the order was pending (DCV was successful) but the certificate had not been issued yet? There was an issue over the last few days (which ended yesterday) where Sectigo certificate requests were not being validated for an extended period of time. 0 -
I haven't seen anything that would suggest a stuck pending order. All of the logs in SSL/TLS > Manage AutoSSL > Logs are the result of having manually run a check. I've looked through the error log and don't see anything obvious regarding AutoSSL on 2/18 (15 days prior to expiration). And this same scenario has happened previously on this server so I don't think it's related to the recent Sectigo issue. 0 -
@jnyr5478 If this has occurred before and based on your analysis I'd suggest opening a ticket so that the issue can be investigated more in-depth by our analysts. 0 -
There was an issue over the last few days (which ended yesterday) where Sectigo certificate requests were not being validated for an extended period of time.
Has the issue indeed been fixed? Usually a certificate request could take up 30 minutes to complete but it has been 5+ hours now for a single certificate.0 -
@cPanelLauren This server is licensed through its hosting provider so I'll open a ticket with them first, referencing this thread. Thank you. 0 -
@cPanelLauren The hosting provider didn't help too much. I've just opened a cPanel support ticket, #93458823. Thank you. 0 -
@cPanelLauren This server is licensed through its hosting provider so I'll open a ticket with them first, referencing this thread. Thank you.
Sounds good, though if they're not able to identify the cause - please feel welcome to open a ticket with us.Has the issue indeed been fixed? Usually a certificate request could take up 30 minutes to complete but it has been 5+ hours now for a single certificate.
According to Sectigo the delays were resolved on the 3rd, we've not had further reports of this issue occurring.0 -
@cPanelLauren The hosting provider didn't help too much. I've just opened a cPanel support ticket, #93458823. Thank you.
I guess I should have waited a couple minutes to respond :) I'll check out your ticket and note this thread on it. I'll update here with the outcome as well. Thanks!0
Please sign in to leave a comment.
Comments
8 comments