Server SSL Cert disappeared
My server certificate (Sectigo Auto-SSL) just up and quit today. I tried to find a suitable cert in the repository but there were only self-signed there ..both root and apache. I can't seem to find a way to Auto-SSL it.
Has c-Panel stopped issuing free certs for servers??.......my Domains are covered just fine...but server i not.
-
We have not stopped issuing certs. What is the output of the following: /scripts/checkallsslcerts --verbose0 -
/scripts/checkallsslcerts --verbose
i can't get this to run Lauren0 -
What do you mean? What's the output when you do? 0 -
What do you mean? What's the output when you do?
What Command do I use to run that script??0 -
Can anybody help me here??? How can I get auto-sl to run for my server? 0 -
Login to your server via SSH as root and just type this and hit enter: /scripts/checkallsslcerts --verbose then let us know the output 0 -
/scripts/checkallsslcerts --verbose
This is what happened : bash: /scripts/checkallsslcerts: No such file or directory0 -
Give this a try instead: /usr/local/cpanel/bin/checkallsslcerts 0 -
/usr/local/cpanel/bin/checkallsslcerts
Output = The system will check for the certificate for the "cpanel" service. The system will attempt to replace the self-signed certificate for the "cpanel" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "cpanel" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "cpanel" service. The system will attempt to install a certificate for the "cpanel" service from the cPanel store. Received error "X::NoCertificate" from cPanel Store (No free ssl certificate found for this IP); requesting new certificate " Setting up HTTP DCV (/var/www/html/.well-known/pki-validation/C7E253648738D64586B169CD246CA27D.txt) " " complete. FAILED: Cpanel::Exception/(XID 279h9d) The system failed to fetch the DCV (Domain Control Validation) file at " because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) "GET" request to " of an error: Could not connect to 'hwsrv-545811.domain.com:80': Address family for hostname not supported. The domain "hwsrv-545811.domain.com" resolved to an IP address "2607:5500:3000:13af:0000:0000:0000:0002" that does not exist on this server. at /usr/local/cpanel/Cpanel/SSL/DCV.pm line 409. [root@hwsrv-545811 ~]#0 -
Okay so you see the problem? Could not connect to 'hwsrv-545811.hostwindsdns.com:80': Address family for hostname not supported. The domain "hwsrv-545811.hostwindsdns.com" resolved to an IP address "2607:5500:3000:13af:0000:0000:0000:0002" that does not exist on this server. 0 -
Thanks Andrew ...I do see that but my ssh port has been changed for security. The other address was supposed to be the IPV6 address which was incorrect....I changed that with a 600TTL....so waiting to see if it will be fixed after DNS prop.....is this a reasonable approach or am I missing something. 0 -
If you fix the DNS entries you should be good then. 0 -
If you fix the DNS entries you should be good then.
Thank You very much!0 -
Still getting this...and no certificate: @hwsrv-545811 ~]# /usr/local/cpanel/bin/checkallsslcerts The system will check for the certificate for the "cpanel" service. The system will attempt to replace the self-signed certificate for the "cpanel" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "cpanel" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "cpanel" service. The system will attempt to install a certificate for the "cpanel" service from the cPanel store. Received error "X::NoCertificate" from cPanel Store (No free ssl certificate found for this IP); requesting new certificate " Setting up HTTP DCV (/var/www/html/.well-known/pki-validation/C1A09A29FBF87A14871EE5B30DBA3C0A.txt) " " complete. Setting up DNS DCV (CNAME _c1a09a29fbf87a14871ee5b30dba3c0a.hwsrv-545811.domain.com) " " complete. Attempting DNS DCV preflight check " FAILED: The DNS DCV check (_c1a09a29fbf87a14871ee5b30dba3c0a.hwsrv-545811.domain.com IN CNAME) did not return the expected value (c8220e546e7536c9335180aaf6fde57c.e11d423c7894b4ed7ecfa41ea8e700ff.comodoca.com). Attempting HTTP DCV preflight check " FAILED: Cpanel::Exception/(XID qhk48b) The system failed to fetch the DCV (Domain Control Validation) file at " because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) "GET" request to " of an error: Could not connect to 'hwsrv-545811.domain.com:80': Address family for hostname not supported. The domain "hwsrv-545811.domain.com" resolved to an IP address "2607:5500:3000:13af:0000:0000:0000:0002" that does not exist on this server. at /usr/local/cpanel/Cpanel/SSL/DCV.pm line 409. [WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: Neither HTTP nor DNS DCV preflight checks succeeded! The system will check for the certificate for the "dovecot" service. The system will attempt to replace the self-signed certificate for the "dovecot" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "dovecot" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "dovecot" service. The system will check for the certificate for the "exim" service. The system will attempt to replace the self-signed certificate for the "exim" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "exim" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "exim" service. 0 -
Cpanel....can you help with this.......I need a service certificate and can't seen to get one...please help! 0 -
It still have an IPV6 entry. Make sure that is removed or corrected. 0 -
It still have an IPV6 entry. Make sure that is removed or corrected.
I corrected it to the exact entry the host provided my other server is working just fine...as was this one until Shazaam...it didn't, I don't know what else to do and now I have an unsecure cPanel product that I paid for.....Plus you are the only person who has helped me.....so Thank You!0 -
I can only suggest to or maybe @cPanelLauren has some further insight on this other than what I said. 0 -
The problem is you still have the AAAA record in place: dig AAAA hwsrv-545811.youdomain.com +short 2607:5500:3000:13af::2
It needs to be removed where DNS for the domain is hosted.0 -
i get that but Hostwinds refusing to remove it...I have deleted all IPv6 addresses from WHM...but there system at HW forbids me to delete the IPv6 for the Server...I can dump them all for the Domains but NOT the server....Any IDEAS?? 0 -
trying like all get out to remove it.....but even though I get this result the SSL won't go: [root@hwsrv-545811 ~]# ifconfig eth0 eth0: flags=4163 mtu 1500 inet 142.11.238.209 netmask 255.255.255.0 broadcast 142.11.238.255 ether fa:16:3e:58:e5:62 txqueuelen 1000 (Ethernet) RX packets 2349596 bytes 143569804 (136.9 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 10560 bytes 9080013 (8.6 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 0 -
You might be better changing the hostname then, you can do so in WHM...to a domain which you owns...make sure you set this to a subdomain like server.yourdomain.com or something then you have full control over it. 0 -
Thank you Andrew for your excellent professional service.......anyone looking for help Andrew is your man!! 0
Please sign in to leave a comment.
Comments
23 comments